General
- Target ctrlem-client.exe
- Size 47.6MB
- Sample260707-xea4psc12r
- SHA256 7b517cab8f9438d33b380d8f9a34a782322002b8bc99af16a4d7a9b92f54101e
- MD5 5564adbf19541b662c6884c8361f3eb8
- SHA1 457accb8b3147811832a7f524b130fc2cac5e389
- SHA512 a70531786199034f05eb72293d4cdd2c3b601d9df98f5463ef2db966b8d4d24209d14ae6c81d778e281e4e3774ba03b0dca8f3dc11fd5de9b6b16c028d37edf7
- SSDEEP 393216:SM7mZDKf8buml9FQVA04+RUn3dnODy+to+KJSPwzXZyRRtz:SM7m9Kf8bu697+RUn3dmUZsl
- TLSH T1A8B76C43F4A601E8C1AEC134C626A223BB717C884B3527DB2B90F7652F76BD06A7D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ctrlem-client.exe
Resource
win11-20260513-de
22 signatures
600 seconds
Malware Config
Targets
-
- Target ctrlem-client.exe
- Size 47.6MB
- SHA256 7b517cab8f9438d33b380d8f9a34a782322002b8bc99af16a4d7a9b92f54101e
- MD5 5564adbf19541b662c6884c8361f3eb8
- SHA1 457accb8b3147811832a7f524b130fc2cac5e389
- SHA512 a70531786199034f05eb72293d4cdd2c3b601d9df98f5463ef2db966b8d4d24209d14ae6c81d778e281e4e3774ba03b0dca8f3dc11fd5de9b6b16c028d37edf7
- SSDEEP 393216:SM7mZDKf8buml9FQVA04+RUn3dnODy+to+KJSPwzXZyRRtz:SM7m9Kf8bu697+RUn3dmUZsl
- TLSH T1A8B76C43F4A601E8C1AEC134C626A223BB717C884B3527DB2B90F7652F76BD06A7D754
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.