General
- Target EasyTS.exe
- Size 15.9MB
- Sample260710-evnevscy6l
- SHA256 fca08f39467074b7db53f2b256fbd6b1f79eb7bafce53f86c4f1ec3580dafaf6
- MD5 3fb69016eea836cc49f57111543a8083
- SHA1 5e71f1591ac2d8b4f5698e31fee8399799add636
- SHA512 587639b1aa1691f2ed00af00605c8782cbcd123c74743da00b15a830eb855fb8cb5264ff9f4027ab4a28065462924aee423e9ef865670397763ae870e18ba25e
- SSDEEP 393216:hnW8c2ILuCDhHTodRGkX57Yx4rQ9v9XN8RLAaYAfd8i:JW8cYCt0LhX5m4gOUsO
- TLSH T135F633AAB7C548F9F89F663886C20611B77674200760C2DB4BE94D612DB71F4EF317A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
EasyTS.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
EasyTS.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target EasyTS.exe
- Size 15.9MB
- SHA256 fca08f39467074b7db53f2b256fbd6b1f79eb7bafce53f86c4f1ec3580dafaf6
- MD5 3fb69016eea836cc49f57111543a8083
- SHA1 5e71f1591ac2d8b4f5698e31fee8399799add636
- SHA512 587639b1aa1691f2ed00af00605c8782cbcd123c74743da00b15a830eb855fb8cb5264ff9f4027ab4a28065462924aee423e9ef865670397763ae870e18ba25e
- SSDEEP 393216:hnW8c2ILuCDhHTodRGkX57Yx4rQ9v9XN8RLAaYAfd8i:JW8cYCt0LhX5m4gOUsO
- TLSH T135F633AAB7C548F9F89F663886C20611B77674200760C2DB4BE94D612DB71F4EF317A2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.