General
- Target agent.exe
- Size 8.4MB
- Sample260628-etyt7sfs2m
- SHA256 73d2d0b839e8b9df8f2670300e49bcd969e9f92df652ce58a4e68edceac2802b
- MD5 ed3072fa8dd2c5f4e7b627e7c4643f33
- SHA1 41ebd5597b990f6c710fd4da62b7b30fd90bd13b
- SHA512 5603eac9ab9575f5663d801099c0e971e3851cc60509cda26fc970aa8282b31c9ff174715c50e36cc148caf326566004dc01317a0300d02f2aeb6cd25c87e033
- SSDEEP 98304:BQeBR5ivGdJtyb0Y1hE7v2RfZbdVGMMdM+/EFw0p:BBzI1i7m1JMDEXp
- TLSH T1B5967B03EDA555E9C1AED1318A7292527F617C484B3123D72BA0F6283F77BD06EB9390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260617-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.4MB
- SHA256 73d2d0b839e8b9df8f2670300e49bcd969e9f92df652ce58a4e68edceac2802b
- MD5 ed3072fa8dd2c5f4e7b627e7c4643f33
- SHA1 41ebd5597b990f6c710fd4da62b7b30fd90bd13b
- SHA512 5603eac9ab9575f5663d801099c0e971e3851cc60509cda26fc970aa8282b31c9ff174715c50e36cc148caf326566004dc01317a0300d02f2aeb6cd25c87e033
- SSDEEP 98304:BQeBR5ivGdJtyb0Y1hE7v2RfZbdVGMMdM+/EFw0p:BBzI1i7m1JMDEXp
- TLSH T1B5967B03EDA555E9C1AED1318A7292527F617C484B3123D72BA0F6283F77BD06EB9390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.