General
- Target agent.exe
- Size 8.6MB
- Sample260630-bexf2sbv7s
- SHA256 5bfb39020a1585cf5d127cf0efd2e3939bfa60b7e7420a9f6fb59d6634bf1459
- MD5 4fd0be51b6cd56f808d4f60aa2ed2287
- SHA1 6e47fda395d54b249d090b292c22a2633924c400
- SHA512 f8d1d6c3cf1189e9bbca95eb6c32f86077c4f3a3d6b8802ecb67a11796c79cca4f24e2df7e39473228cc85376ec8b11a32f864de5575af9c4d6fa4a56694452f
- SSDEEP 98304:wQko1tqDqdPIbNwYEdmk0oz46a5/UJtMyk2Kud5:wunwNwRdmk0os6I/uhk2J
- TLSH T1CE967B47FC6565E5C0AEE2348A769212BB317C480B3263D31B90F6683F76BD06DB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.6MB
- SHA256 5bfb39020a1585cf5d127cf0efd2e3939bfa60b7e7420a9f6fb59d6634bf1459
- MD5 4fd0be51b6cd56f808d4f60aa2ed2287
- SHA1 6e47fda395d54b249d090b292c22a2633924c400
- SHA512 f8d1d6c3cf1189e9bbca95eb6c32f86077c4f3a3d6b8802ecb67a11796c79cca4f24e2df7e39473228cc85376ec8b11a32f864de5575af9c4d6fa4a56694452f
- SSDEEP 98304:wQko1tqDqdPIbNwYEdmk0oz46a5/UJtMyk2Kud5:wunwNwRdmk0os6I/uhk2J
- TLSH T1CE967B47FC6565E5C0AEE2348A769212BB317C480B3263D31B90F6683F76BD06DB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.