General
- Target RtkAudUpdater64.exe
- Size 83.7MB
- Sample260629-18vxrahx2k
- SHA256 80364e04bae58a64ca475ed23eb2638982a7d3c284a79bc55530723ad890e7c2
- MD5 968f540f472489db9511bd353d1dcd43
- SHA1 0f300089a9ce00f452c6c7dac91a5de6b40940e9
- SHA512 db61ac411a7f04d21c15454e3b5a27c0f1a922f1721e9d80991168596207c18169e5ed66c549b4fdaac5d4b286ec55e5cd1b5c7a81cf1b443f43cc9397bc5ffd
- SSDEEP 1572864:8qrTIAifQIlH+vWlM9ojCrD4WWJvKSc/JUNnVdPhC5OOThSQI9RW+UH3odyawyNl:9EMelKbDSc/iFVdk3FM9UjyH
- TLSH T18B1833811F00A6CAE86C913356D09E52D67B789E7E91CA5B27F40A721CB73CCC5BCE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
RtkAudUpdater64.exe
Resource
win10ltsc2021-20260513-en
7 signatures
300 seconds
Behavioral task
behavioral2
Sample
RtkAudUpdater64.exe
Resource
win11ltsc2024-20260629-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target RtkAudUpdater64.exe
- Size 83.7MB
- SHA256 80364e04bae58a64ca475ed23eb2638982a7d3c284a79bc55530723ad890e7c2
- MD5 968f540f472489db9511bd353d1dcd43
- SHA1 0f300089a9ce00f452c6c7dac91a5de6b40940e9
- SHA512 db61ac411a7f04d21c15454e3b5a27c0f1a922f1721e9d80991168596207c18169e5ed66c549b4fdaac5d4b286ec55e5cd1b5c7a81cf1b443f43cc9397bc5ffd
- SSDEEP 1572864:8qrTIAifQIlH+vWlM9ojCrD4WWJvKSc/JUNnVdPhC5OOThSQI9RW+UH3odyawyNl:9EMelKbDSc/iFVdk3FM9UjyH
- TLSH T18B1833811F00A6CAE86C913356D09E52D67B789E7E91CA5B27F40A721CB73CCC5BCE61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.