General
- Target 2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575
- Size 680KB
- Sample260702-rwsgesfz6v
- SHA256 2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575
- MD5 3ec00ddf222058b11b9f38587833b1eb
- SHA1 dfe4f40467bd4ce7e6496b3c9c3e8f767f567ed8
- SHA512 e494139214502bbf5f49573e92e6d9ac378353a35162a999f5e14e8bb5f10a8073c2c6565ff1def8034d7228c8f42f31068196fbfb6a4df765777b2864034881
- SSDEEP 6144:xj7tw2lFBg7drFUNO01KUAATJ2cO4DSdgWT9YSsxJEHK7/FbMkV5Ge2C6STBHUW8:xZFBg7dpqO4DSyWeEHShMdQFRP6fodk
- TLSH T1B2E44A8336DA1CF6DE93273858DF53796338FEB04B2A4B270518E2316D13AD1AD5A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575.exe
Resource
win11ltsc2024-20260629-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575
- Size 680KB
- SHA256 2b2d22b937d777731f06d452ba32d804c18590b40f4a84bf6d215a4b1a2a7575
- MD5 3ec00ddf222058b11b9f38587833b1eb
- SHA1 dfe4f40467bd4ce7e6496b3c9c3e8f767f567ed8
- SHA512 e494139214502bbf5f49573e92e6d9ac378353a35162a999f5e14e8bb5f10a8073c2c6565ff1def8034d7228c8f42f31068196fbfb6a4df765777b2864034881
- SSDEEP 6144:xj7tw2lFBg7drFUNO01KUAATJ2cO4DSdgWT9YSsxJEHK7/FbMkV5Ge2C6STBHUW8:xZFBg7dpqO4DSyWeEHShMdQFRP6fodk
- TLSH T1B2E44A8336DA1CF6DE93273858DF53796338FEB04B2A4B270518E2316D13AD1AD5A711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.