General
- Target agent.exe
- Size 8.7MB
- Sample260702-19rlqacv3n
- SHA256 d4b65ff6eaa6ea3f5e16e5b5f77f2dcfb66401383415e36a6e492fe0d26255ef
- MD5 a7261af307454587fb2dace4983e3792
- SHA1 26216e9bd570abc9911b6ff7bbb4003487f9606e
- SHA512 fc09a801655d4fa6289b67df5f9bf958a7aa1ce906ca315179f3dc517fca88c129bcedb41ac220887f2380e3b40383edf6b823f33e4eabe5fb10180ea24fce56
- SSDEEP 98304:+x+BFjecuzvVWYjEWdS05J7gpiZyfU6XoUljhDkrH0xqfIEKIpETz:+0AWYwWdSABg0yfdYKqA3Ip
- TLSH T1A2968B07ECA559E9C1AED5308A72A152BB31BC580B3123D71B90F7283F76BD06DB9318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.7MB
- SHA256 d4b65ff6eaa6ea3f5e16e5b5f77f2dcfb66401383415e36a6e492fe0d26255ef
- MD5 a7261af307454587fb2dace4983e3792
- SHA1 26216e9bd570abc9911b6ff7bbb4003487f9606e
- SHA512 fc09a801655d4fa6289b67df5f9bf958a7aa1ce906ca315179f3dc517fca88c129bcedb41ac220887f2380e3b40383edf6b823f33e4eabe5fb10180ea24fce56
- SSDEEP 98304:+x+BFjecuzvVWYjEWdS05J7gpiZyfU6XoUljhDkrH0xqfIEKIpETz:+0AWYwWdSABg0yfdYKqA3Ip
- TLSH T1A2968B07ECA559E9C1AED5308A72A152BB31BC580B3123D71B90F7283F76BD06DB9318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.