General
- Target z2amLOu (1).exe
- Size 7.0MB
- Sample260628-tvycdsav3j
- SHA256 922a874a72ef9b074a92b66ea5581aaad84f0a54196ae49ab4ea5f8c5767514c
- MD5 264bb21bf76b62876161d8528f8357ff
- SHA1 b286f992de487a5ba43cf399c6500f0c2b1e4a6b
- SHA512 f6b3a775e9f1ad092423b4d8dbaf24b61d950d0744ed45eb6a12fda4a4d155cbc2a3e5db142e6c08fdec240cb46d19b512a809c30d34d26bcea95d18556c5f77
- SSDEEP 196608:gWKAtQA1HeT39IigleE9TFa0Z8DOjCdylAkQyyeoD:J7p1+TtIiHY9Z8D8CclAnbD
- TLSH T14B76331472F109E9EDB75179C2D2C961EBB278660771C78F23F81A622F132F1893A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
z2amLOu (1).exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
z2amLOu (1).exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target z2amLOu (1).exe
- Size 7.0MB
- SHA256 922a874a72ef9b074a92b66ea5581aaad84f0a54196ae49ab4ea5f8c5767514c
- MD5 264bb21bf76b62876161d8528f8357ff
- SHA1 b286f992de487a5ba43cf399c6500f0c2b1e4a6b
- SHA512 f6b3a775e9f1ad092423b4d8dbaf24b61d950d0744ed45eb6a12fda4a4d155cbc2a3e5db142e6c08fdec240cb46d19b512a809c30d34d26bcea95d18556c5f77
- SSDEEP 196608:gWKAtQA1HeT39IigleE9TFa0Z8DOjCdylAkQyyeoD:J7p1+TtIiHY9Z8D8CclAnbD
- TLSH T14B76331472F109E9EDB75179C2D2C961EBB278660771C78F23F81A622F132F1893A752
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.