General
- Target SantaPriv.exe
- Size 59.0MB
- Sample260701-2de4gsg151
- SHA256 e217aa10ae733aa70fe15ff0b3f8b695dd442b1d9a243bbf196d0e21d0610c6a
- MD5 9a5fd587fa1983d29aea4ebca1f9e274
- SHA1 4b266c4833467949edf67306b5feb004449c593e
- SHA512 db9b04a15fc0daf53534c1df984501c60140c2cdd577b9bbeb47a7dec03698d58c94a16aba7f7b75dab1dc18d499c5fcd2a9d66fa0aa2723527c143da9e19963
- SSDEEP 393216:Yv+ZgIDtjKpjSTPGJi9qOeqIXuFSq3U8mdOTlmuyhT/evPMRL31CPwDvt3uFhCIo:iCDtjKqcjdODEr8NcMzg
- TLSH T1AED7AE0273650055F672C0B48DAAB617DF757CAA17E052D731A8F6A82FB3FC16ABD600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SantaPriv.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
SantaPriv.exe
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SantaPriv.exe
- Size 59.0MB
- SHA256 e217aa10ae733aa70fe15ff0b3f8b695dd442b1d9a243bbf196d0e21d0610c6a
- MD5 9a5fd587fa1983d29aea4ebca1f9e274
- SHA1 4b266c4833467949edf67306b5feb004449c593e
- SHA512 db9b04a15fc0daf53534c1df984501c60140c2cdd577b9bbeb47a7dec03698d58c94a16aba7f7b75dab1dc18d499c5fcd2a9d66fa0aa2723527c143da9e19963
- SSDEEP 393216:Yv+ZgIDtjKpjSTPGJi9qOeqIXuFSq3U8mdOTlmuyhT/evPMRL31CPwDvt3uFhCIo:iCDtjKqcjdODEr8NcMzg
- TLSH T1AED7AE0273650055F672C0B48DAAB617DF757CAA17E052D731A8F6A82FB3FC16ABD600
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.