General
- Target agent.exe
- Size 8.6MB
- Sample260702-c78kfshy2k
- SHA256 a134817ffcc7760b1e25c194d5140ff265b17925682655f61ddda14557c58dd6
- MD5 7655b3ddd87dca9d2fd06858ff9b5006
- SHA1 002b831a5fbb2a78e19f0618e7a1f17b89310453
- SHA512 bf15d9432bc5301bfbe3a86a72ffe5075675877d244305a83fba502b52d22b8e01d23e8308f79f13c65fc94ab8eb6109ecf64033779535512285947fc2b7a17d
- SSDEEP 98304:JnQSUH6omgSkoJYE2ClcSV9FUOnARYvek4IGgp:JvCoJR2qpVDUOAhk4I
- TLSH T11C967B47ECA568E9C0ADE1308A629513BB61BC491B3127D31B90F7283F77BD0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent.exe
Resource
win11ltsc2024-20260629-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target agent.exe
- Size 8.6MB
- SHA256 a134817ffcc7760b1e25c194d5140ff265b17925682655f61ddda14557c58dd6
- MD5 7655b3ddd87dca9d2fd06858ff9b5006
- SHA1 002b831a5fbb2a78e19f0618e7a1f17b89310453
- SHA512 bf15d9432bc5301bfbe3a86a72ffe5075675877d244305a83fba502b52d22b8e01d23e8308f79f13c65fc94ab8eb6109ecf64033779535512285947fc2b7a17d
- SSDEEP 98304:JnQSUH6omgSkoJYE2ClcSV9FUOnARYvek4IGgp:JvCoJR2qpVDUOAhk4I
- TLSH T11C967B47ECA568E9C0ADE1308A629513BB61BC491B3127D31B90F7283F77BD0ADB9354
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.