General
- Target agent.exe
- Size 8.4MB
- Sample260628-h3h2wsf18m
- SHA256 6779a03f0d76a7e9858db6b5a55ae00767e0181c1eac03dbcdd45d65b5f68cb2
- MD5 607590ac89a41b79076ac5976c0aa41f
- SHA1 2e772d90b0d280cbe93f915689d529352f140893
- SHA512 6eb0c9cf237ce666df18f90908428b6d6097fe8f37d22d6a12ead32cd3f05f66294953d11d6dd0e6c697c499701779a566ff6854a5c8458547c927b7dbc84e4a
- SSDEEP 98304:uQeBR5ivGdJtybbY1hEgfR5Z1RyWHBt9QJ5zq+3vOFs0:uBzx1iIEMB3Sq8O3
- TLSH T16C967B03EDA555E5C1AED1318A729252BF217C485B3123D72BA0F6283F77BD06EB9390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.4MB
- SHA256 6779a03f0d76a7e9858db6b5a55ae00767e0181c1eac03dbcdd45d65b5f68cb2
- MD5 607590ac89a41b79076ac5976c0aa41f
- SHA1 2e772d90b0d280cbe93f915689d529352f140893
- SHA512 6eb0c9cf237ce666df18f90908428b6d6097fe8f37d22d6a12ead32cd3f05f66294953d11d6dd0e6c697c499701779a566ff6854a5c8458547c927b7dbc84e4a
- SSDEEP 98304:uQeBR5ivGdJtybbY1hEgfR5Z1RyWHBt9QJ5zq+3vOFs0:uBzx1iIEMB3Sq8O3
- TLSH T16C967B03EDA555E5C1AED1318A729252BF217C485B3123D72BA0F6283F77BD06EB9390
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.