General
- Target subscribe.exe
- Size 16.2MB
- Sample260710-ae6jaaaz9n
- SHA256 f9a6ac3c1ce394609410cbe88d38769cae24a25fd4b8a5e82eb9f2b8bb7dc557
- MD5 067e2efd94ab9339039ac0c727204e2a
- SHA1 f375d4bd45a2fd1c463ba9e61783d4c655c4297c
- SHA512 1a0b4d472b8fa726507a66cdde396366d1879edbb18e84d1eadb0de19d89bddbf9a394f7489dc57a510119f66c47a1223f3d2ec086582f0cf11616ec1ae3fbb3
- SSDEEP 196608:awXVG3JHAFzmqXKC8V6Faaya8l0S7oxT8TSfg2lhu:PXVG3JgF3Z46FaayFsxT8TSfg4h
- TLSH T1AE0706217B5A996DC05BC474834B8B724A7130CA0B39B9FF449496383F6ABF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
subscribe.exe
Resource
win11-20260513-en
15 signatures
150 seconds
Malware Config
Targets
-
- Target subscribe.exe
- Size 16.2MB
- SHA256 f9a6ac3c1ce394609410cbe88d38769cae24a25fd4b8a5e82eb9f2b8bb7dc557
- MD5 067e2efd94ab9339039ac0c727204e2a
- SHA1 f375d4bd45a2fd1c463ba9e61783d4c655c4297c
- SHA512 1a0b4d472b8fa726507a66cdde396366d1879edbb18e84d1eadb0de19d89bddbf9a394f7489dc57a510119f66c47a1223f3d2ec086582f0cf11616ec1ae3fbb3
- SSDEEP 196608:awXVG3JHAFzmqXKC8V6Faaya8l0S7oxT8TSfg2lhu:PXVG3JgF3Z46FaayFsxT8TSfg4h
- TLSH T1AE0706217B5A996DC05BC474834B8B724A7130CA0B39B9FF449496383F6ABF46F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist