General
- Target panel-file.exe
- Size 76.6MB
- Sample260701-mc4m5abv6m
- SHA256 250335df594601db3e5fd92668d99029a9528a2c951ad69042799de94f4eaef4
- MD5 ec32e8ff0e32cd238c637342af09cf0c
- SHA1 f12979e79592f2ccfc42f7119ee6496df264cfb7
- SHA512 22c76c61194666cbc0770b1737434150c372a883dfb7e165f86aa29329c1f120adcf432dbec440aaf536130839db28840dc603dfdf7dc90b5dd868aa2bb15003
- SSDEEP 1572864:iqPnddZno+vWlM9ojCrD4WWJvKSc/JUNny1TadunnM9lzSwgY0odH0piSqjY:F/elKbDSc/iFqM9lipiSq
- TLSH T1D50833454E41888BE85ED23696E48D57D177789969A24FC707F009693EEB3C8CE3FE20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
panel-file.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target panel-file.exe
- Size 76.6MB
- SHA256 250335df594601db3e5fd92668d99029a9528a2c951ad69042799de94f4eaef4
- MD5 ec32e8ff0e32cd238c637342af09cf0c
- SHA1 f12979e79592f2ccfc42f7119ee6496df264cfb7
- SHA512 22c76c61194666cbc0770b1737434150c372a883dfb7e165f86aa29329c1f120adcf432dbec440aaf536130839db28840dc603dfdf7dc90b5dd868aa2bb15003
- SSDEEP 1572864:iqPnddZno+vWlM9ojCrD4WWJvKSc/JUNny1TadunnM9lzSwgY0odH0piSqjY:F/elKbDSc/iFqM9lipiSq
- TLSH T1D50833454E41888BE85ED23696E48D57D177789969A24FC707F009693EEB3C8CE3FE20
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1