General
- Target agent-f171.exe
- Size 8.6MB
- Sample260701-j461saby8s
- SHA256 0ddc8ad068e43b5937b9f450a4d3bc5a0d80d3dc15a2bcd1cc78ff05e91fdcfb
- MD5 aa5867373264587a4a782838810339b7
- SHA1 ecfd6b9cf5b74ad6a4edd4a2d43a2a9e8edb9b34
- SHA512 5c68381542fd27c875c2d0795a9a9d4d366dd73cf27bbae0e20913c6568fcf6fa15cdf885a070ad1d73bd15d291b22c62168b088b1edda7ee28c0b76b22ad6d3
- SSDEEP 196608:1F58wWmXJPlFOoReL86nDA2gkPfOGAZ2r:1fBWweL/RnPzAZ2r
- TLSH T14C967B03ECA559E9C0AED230DA6692537F217C480B2173D72BA0F6683F76BE06D79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent-f171.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent-f171.exe
Resource
win11ltsc2024-20260629-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target agent-f171.exe
- Size 8.6MB
- SHA256 0ddc8ad068e43b5937b9f450a4d3bc5a0d80d3dc15a2bcd1cc78ff05e91fdcfb
- MD5 aa5867373264587a4a782838810339b7
- SHA1 ecfd6b9cf5b74ad6a4edd4a2d43a2a9e8edb9b34
- SHA512 5c68381542fd27c875c2d0795a9a9d4d366dd73cf27bbae0e20913c6568fcf6fa15cdf885a070ad1d73bd15d291b22c62168b088b1edda7ee28c0b76b22ad6d3
- SSDEEP 196608:1F58wWmXJPlFOoReL86nDA2gkPfOGAZ2r:1fBWweL/RnPzAZ2r
- TLSH T14C967B03ECA559E9C0AED230DA6692537F217C480B2173D72BA0F6683F76BE06D79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.