General
- Target agent.exe
- Size 10.3MB
- Sample260625-lrsczaaz4k
- SHA256 7b1bfd301aeab8d65e783cad9a8b0c4ece6a0c29be5790fe8f21833f4b531377
- MD5 90e4758b7eed56a78366f481bcfdd6f7
- SHA1 0b2d0d8993dff75dd9df961854d17b7a8556738a
- SHA512 f6e8315048051c51b6e3132b569c7d1d9f4b007449e4049a48e1d2259d2ae4855bf44cf3811eb8d602854bdf4940f50c7b53a10c83d14cb102d2521b615ba8aa
- SSDEEP 98304:KcqdObDhjYpC4NDhNUOEy5zTi9aEYQqJkHT0it/ALnNvKZP3:K5c1eDHUryNTiimTJtIc
- TLSH T1E3B68B07EDA525E8C0EEC13489679512BB717C495B3123D71B60F6283F72BE06EB9B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 10.3MB
- SHA256 7b1bfd301aeab8d65e783cad9a8b0c4ece6a0c29be5790fe8f21833f4b531377
- MD5 90e4758b7eed56a78366f481bcfdd6f7
- SHA1 0b2d0d8993dff75dd9df961854d17b7a8556738a
- SHA512 f6e8315048051c51b6e3132b569c7d1d9f4b007449e4049a48e1d2259d2ae4855bf44cf3811eb8d602854bdf4940f50c7b53a10c83d14cb102d2521b615ba8aa
- SSDEEP 98304:KcqdObDhjYpC4NDhNUOEy5zTi9aEYQqJkHT0it/ALnNvKZP3:K5c1eDHUryNTiimTJtIc
- TLSH T1E3B68B07EDA525E8C0EEC13489679512BB717C495B3123D71B60F6283F72BE06EB9B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.