General
- Target ixware.exe
- Size 2.1MB
- Sample260629-tkmg5sht9t
- SHA256 c54ae3d6452f80df95bc8d72aa75459d7eacd4160a73cadd4916b3935d380275
- MD5 fc4f75cd734a7fbcb919690a538fc4d7
- SHA1 288edd38cf497eb7edb062414eb365989b8ecfc5
- SHA512 15a66339dbab0d4b4c6b70adfb6b577e3ae3b98ecd6e1274ab0bbd72c2ae1f96745aa92a429ad28bc40e40bea5e6a54355edf63b60f5dcabc15b777ae424911a
- SSDEEP 24576:xqkNgsOmBBMnAZ5/1WWlhKCM6PCM9bodoQ9pxCPmyaW4Ntw4EdGmIbXSFMnVIH0K:RNHdvhKCM6/P74kwgoIU6i4s8
- TLSH T1C2A56C12BA5A94ECD4AAC47483478A326A3174CB0B35B9FF05D456783E6AEF01F3C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ixware.exe
Resource
win10v2004-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
ixware.exe
Resource
win10ltsc2021-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral3
Sample
ixware.exe
Resource
win11-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral4
Sample
ixware.exe
Resource
win11ltsc2024-20260629-en
1 signatures
30 seconds
Malware Config
Targets
-
- Target ixware.exe
- Size 2.1MB
- SHA256 c54ae3d6452f80df95bc8d72aa75459d7eacd4160a73cadd4916b3935d380275
- MD5 fc4f75cd734a7fbcb919690a538fc4d7
- SHA1 288edd38cf497eb7edb062414eb365989b8ecfc5
- SHA512 15a66339dbab0d4b4c6b70adfb6b577e3ae3b98ecd6e1274ab0bbd72c2ae1f96745aa92a429ad28bc40e40bea5e6a54355edf63b60f5dcabc15b777ae424911a
- SSDEEP 24576:xqkNgsOmBBMnAZ5/1WWlhKCM6PCM9bodoQ9pxCPmyaW4Ntw4EdGmIbXSFMnVIH0K:RNHdvhKCM6/P74kwgoIU6i4s8
- TLSH T1C2A56C12BA5A94ECD4AAC47483478A326A3174CB0B35B9FF05D456783E6AEF01F3C719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.