General
- Target agent.exe
- Size 8.5MB
- Sample260629-jlylpagt8t
- SHA256 5804c190a77d9ad2d2ceeeb6b1caa65e969a20b098ba38f2ab861f96576b6cd9
- MD5 27d9a477f64d3d9acf0d432842dcad10
- SHA1 5990131bfa94cf2a7b1a4a0a25ecb0095d5c37ef
- SHA512 ef1095a573c9d0912eaad5efde9e0e765a3b7ee3a4d8ea0c2cffcfa2f8628f0f41be777850fbbb595d010356d2026aa2d61eb86f8c111d70eb5fb7457e09c0b4
- SSDEEP 98304:G+C/rrz8yWotGHV0EEKinhvbOZFESRznlrqVV7oPeo5:GpWHVNAZSZukznlqVV7oPh
- TLSH T1D5968C43FC9554E8C1AED2358A729512BB71BC490B3027D32BA0F6293F76BD06DB9394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260617-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.5MB
- SHA256 5804c190a77d9ad2d2ceeeb6b1caa65e969a20b098ba38f2ab861f96576b6cd9
- MD5 27d9a477f64d3d9acf0d432842dcad10
- SHA1 5990131bfa94cf2a7b1a4a0a25ecb0095d5c37ef
- SHA512 ef1095a573c9d0912eaad5efde9e0e765a3b7ee3a4d8ea0c2cffcfa2f8628f0f41be777850fbbb595d010356d2026aa2d61eb86f8c111d70eb5fb7457e09c0b4
- SSDEEP 98304:G+C/rrz8yWotGHV0EEKinhvbOZFESRznlrqVV7oPeo5:GpWHVNAZSZukznlqVV7oPh
- TLSH T1D5968C43FC9554E8C1AED2358A729512BB71BC490B3027D32BA0F6293F76BD06DB9394
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.