General
- Target WFS.exe
- Size 410KB
- Sample260708-vl1a3aes8v
- SHA256 849764d0e88f12aa98507e902a2483c4e148841439686c521ac18882be237eae
- MD5 729790a744ac82d32db62c2762778134
- SHA1 8352a4ba578177335456304a81702b4c5db5a743
- SHA512 03bb2b5b8f1a8f9982a9fa878051147b13a3fd8d0f34fb19dc252bd65514554720bfc7eb51ecf473c66b0589e8160e6992adbd3a12e50b233422ad8ddcf7bbbd
- SSDEEP 3072:vPK4kERuqUdarUQCi9v+X90+BCho8ox/rHJBmK:CKzUvQvk0+UhSC
- TLSH T1DC942A52A29026A5DC2A4B344432CD359763FEB02FF4E69FDAE87E3B3B371C14925251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WFS.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WFS.exe
Resource
win11ltsc2024-20260706-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target WFS.exe
- Size 410KB
- SHA256 849764d0e88f12aa98507e902a2483c4e148841439686c521ac18882be237eae
- MD5 729790a744ac82d32db62c2762778134
- SHA1 8352a4ba578177335456304a81702b4c5db5a743
- SHA512 03bb2b5b8f1a8f9982a9fa878051147b13a3fd8d0f34fb19dc252bd65514554720bfc7eb51ecf473c66b0589e8160e6992adbd3a12e50b233422ad8ddcf7bbbd
- SSDEEP 3072:vPK4kERuqUdarUQCi9v+X90+BCho8ox/rHJBmK:CKzUvQvk0+UhSC
- TLSH T1DC942A52A29026A5DC2A4B344432CD359763FEB02FF4E69FDAE87E3B3B371C14925251
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.