General
- Target Diversion.exe
- Size 15.0MB
- Sample260710-lvtefag13j
- SHA256 728804e962681f9fce6d05657f902d7464c7a60cd551f7763f3b2cb441a439f2
- MD5 c593495dcd929ac3b718cc8e63dd3827
- SHA1 ba1ad7e2898313b40241186d87d014887c045ab2
- SHA512 07d0620e55b0b8eb7eda69ec7ea383ab99d36085b83afe5df6198bcc05f7a53223478d2b00a7774b375721e2031be52954d675d1e58337ec4f387cc9bfa03e5c
- SSDEEP 393216:DohLRU/XEAphVtnIUQSg+szC+ztTCvF7dvpljw:UlSRphDto+szFztuvF7Jw
- TLSH T18EF6339CB7904AABE4E7563D1961D721B3B1FC501F52C3EF0BA07A042E3BA950E391E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Diversion.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Diversion.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Diversion.exe
- Size 15.0MB
- SHA256 728804e962681f9fce6d05657f902d7464c7a60cd551f7763f3b2cb441a439f2
- MD5 c593495dcd929ac3b718cc8e63dd3827
- SHA1 ba1ad7e2898313b40241186d87d014887c045ab2
- SHA512 07d0620e55b0b8eb7eda69ec7ea383ab99d36085b83afe5df6198bcc05f7a53223478d2b00a7774b375721e2031be52954d675d1e58337ec4f387cc9bfa03e5c
- SSDEEP 393216:DohLRU/XEAphVtnIUQSg+szC+ztTCvF7dvpljw:UlSRphDto+szFztuvF7Jw
- TLSH T18EF6339CB7904AABE4E7563D1961D721B3B1FC501F52C3EF0BA07A042E3BA950E391E5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.