General
- Target agent-7add.exe
- Size 8.2MB
- Sample260625-qa5desct5r
- SHA256 f4cb3d0265888461f1e0cd2881262959f3710bb8f517fcae2d4d5c3f5ec0f0a5
- MD5 a126e774f19e367ff5fa34c66fbdec63
- SHA1 c16d1303e77c03ce225f698a4fbdb9d727077787
- SHA512 5f07f9cad64fdf4ef4015b5601d866412c696ae3b2ad9e7bcc16cdab96e06523c852f0f4c5f5eb215fd46f06bc8d7ee395edfc106d1c76711d6aa49bdbfcc958
- SSDEEP 98304:1XlHA+xNIvjVBLeN5XESVNybkVuQ76RtxPE3KZQy0J8u:1C6USDgMn7w/Qn
- TLSH T1AF867B07ECA558E8C1AEE230897795537B21BC490B3127D31B50B6297F77BE0AEB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent-7add.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent-7add.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent-7add.exe
- Size 8.2MB
- SHA256 f4cb3d0265888461f1e0cd2881262959f3710bb8f517fcae2d4d5c3f5ec0f0a5
- MD5 a126e774f19e367ff5fa34c66fbdec63
- SHA1 c16d1303e77c03ce225f698a4fbdb9d727077787
- SHA512 5f07f9cad64fdf4ef4015b5601d866412c696ae3b2ad9e7bcc16cdab96e06523c852f0f4c5f5eb215fd46f06bc8d7ee395edfc106d1c76711d6aa49bdbfcc958
- SSDEEP 98304:1XlHA+xNIvjVBLeN5XESVNybkVuQ76RtxPE3KZQy0J8u:1C6USDgMn7w/Qn
- TLSH T1AF867B07ECA558E8C1AEE230897795537B21BC490B3127D31B50B6297F77BE0AEB9350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.