General
- Target agent.exe
- Size 8.7MB
- Sample260702-b3nttaay4x
- SHA256 9c32bd3e0bac622f943d4f17e46566ba4b9a52337fedbade1a4c352c6c50cd92
- MD5 ae612435d80fc75bae0d51fbe30a1345
- SHA1 251ebe8b266f0569070fdda93a69f55079b84e49
- SHA512 8d7c346c879cfb065905b961ca8c16e806d262325609a6ebfd5e966c5eeca0e23aa67dbe4d010ab7a828182bd39a05df7c77acdde1efe9f46d60be1a8a745b70
- SSDEEP 98304:w+cKxBaYXthvoNI8ErPjs6CbxOck3DSoLBPJQ4IGgp:wWLkI1DjDCZk3DSj4I
- TLSH T1E9967C87ECA564E9C0ADE1348A729113BB61BC481B3127D31BA4F6283F77BD0AD79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.7MB
- SHA256 9c32bd3e0bac622f943d4f17e46566ba4b9a52337fedbade1a4c352c6c50cd92
- MD5 ae612435d80fc75bae0d51fbe30a1345
- SHA1 251ebe8b266f0569070fdda93a69f55079b84e49
- SHA512 8d7c346c879cfb065905b961ca8c16e806d262325609a6ebfd5e966c5eeca0e23aa67dbe4d010ab7a828182bd39a05df7c77acdde1efe9f46d60be1a8a745b70
- SSDEEP 98304:w+cKxBaYXthvoNI8ErPjs6CbxOck3DSoLBPJQ4IGgp:wWLkI1DjDCZk3DSj4I
- TLSH T1E9967C87ECA564E9C0ADE1348A729113BB61BC481B3127D31BA4F6283F77BD0AD79354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.