General
- Target Trollface.exe
- Size 16.0MB
- Sample260710-2ymdasgw71
- SHA256 1e0c99085279981ce8ee5382d687563dad9057c9196751969035a1f038afac77
- MD5 92aa4fd5b2cce448cb718e73d9799fd2
- SHA1 499b0787baf3a300944bb22fc89db8cf27761ed8
- SHA512 80a34147048f219b5e24883e30625d7c092811234eb065e20fefc9cb2681b57ec8f568976396af96c3ef8714ef54edff1117f6fea06927ff43d499de03bc9a3d
- SSDEEP 393216:ZlOyzgIfUKOcgx/hqWbdXQfM6R4RmhvgKqHsnvDwHUeB141:TX58KPgxvYMc3vgKYgEHb8
- TLSH T164073369E7D408B7E5E7113C5A748B03F2B279150BA289DF0BB40B1A2F5B7E0093D676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Trollface.exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Malware Config
Targets
-
- Target Trollface.exe
- Size 16.0MB
- SHA256 1e0c99085279981ce8ee5382d687563dad9057c9196751969035a1f038afac77
- MD5 92aa4fd5b2cce448cb718e73d9799fd2
- SHA1 499b0787baf3a300944bb22fc89db8cf27761ed8
- SHA512 80a34147048f219b5e24883e30625d7c092811234eb065e20fefc9cb2681b57ec8f568976396af96c3ef8714ef54edff1117f6fea06927ff43d499de03bc9a3d
- SSDEEP 393216:ZlOyzgIfUKOcgx/hqWbdXQfM6R4RmhvgKqHsnvDwHUeB141:TX58KPgxvYMc3vgKYgEHb8
- TLSH T164073369E7D408B7E5E7113C5A748B03F2B279150BA289DF0BB40B1A2F5B7E0093D676
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.