General
- Target agent.exe
- Size 8.2MB
- Sample260625-xbb7laey6j
- SHA256 44a5763375424e0baeea73bd6bc45730a3c9988c313383698f5181700a71f209
- MD5 6c994d8fd2ba865ab2d8e2f6d1c4feb2
- SHA1 88048aba55dfa3bff8819e34ccf2817396c6c217
- SHA512 fa205829d2d11a5bcc7c5ddcd57974826a046242a4bfac440ad877d72a702179c8d00228033a885c0f0425607cbeff6d6b093f91c7fca54d61d2b6ac6b2ec01c
- SSDEEP 49152:CipXHwe8GbySyJbIqWFYPfz8IYn0Osn1eOadT2VIBO92M0RZOJ5E2ZXzmvm2RHeW:CihQfR3SmwuQTJZWEGon/cBk8/srO2s
- TLSH T192867B07EC9554E9C0AED1348A669122BF71BC490B2123D71F94FA297F77BE0ADB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.2MB
- SHA256 44a5763375424e0baeea73bd6bc45730a3c9988c313383698f5181700a71f209
- MD5 6c994d8fd2ba865ab2d8e2f6d1c4feb2
- SHA1 88048aba55dfa3bff8819e34ccf2817396c6c217
- SHA512 fa205829d2d11a5bcc7c5ddcd57974826a046242a4bfac440ad877d72a702179c8d00228033a885c0f0425607cbeff6d6b093f91c7fca54d61d2b6ac6b2ec01c
- SSDEEP 49152:CipXHwe8GbySyJbIqWFYPfz8IYn0Osn1eOadT2VIBO92M0RZOJ5E2ZXzmvm2RHeW:CihQfR3SmwuQTJZWEGon/cBk8/srO2s
- TLSH T192867B07EC9554E9C0AED1348A669122BF71BC490B2123D71F94FA297F77BE0ADB9310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.