General
- Target AfterEffects_2026.exe
- Size 8.4MB
- Sample260627-e41rjsht8p
- SHA256 59e5266f45763d911c9a545242847a5772c104a24efec6587423ba6d908ef2c6
- MD5 c95c72d8ed7e8d1d8e718fc492f3a9f1
- SHA1 a569a5611b0a8448d2d0ff900f3a8ed981a5a702
- SHA512 524548bcde662302c6b0d102631abd85b2b8926e63f9641b500bc6b32f4d07f75ba4c939792e9cf5cf7569fc2516058b422dcd0cc10172455ba77069f930dc76
- SSDEEP 98304:sYQ51/BI5JP0TTsExmfpSV3qpzo336gY+:srfTFxm0o036S
- TLSH T143966A07FCA559E9C1AE92318AB29613BF217C484B2167D31B90B6383F77BD0AD79350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AfterEffects_2026.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
AfterEffects_2026.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target AfterEffects_2026.exe
- Size 8.4MB
- SHA256 59e5266f45763d911c9a545242847a5772c104a24efec6587423ba6d908ef2c6
- MD5 c95c72d8ed7e8d1d8e718fc492f3a9f1
- SHA1 a569a5611b0a8448d2d0ff900f3a8ed981a5a702
- SHA512 524548bcde662302c6b0d102631abd85b2b8926e63f9641b500bc6b32f4d07f75ba4c939792e9cf5cf7569fc2516058b422dcd0cc10172455ba77069f930dc76
- SSDEEP 98304:sYQ51/BI5JP0TTsExmfpSV3qpzo336gY+:srfTFxm0o036S
- TLSH T143966A07FCA559E9C1AE92318AB29613BF217C484B2167D31B90B6383F77BD0AD79350
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Modifies file permissions
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.