General
- Target TgWsProxy_windows.exe
- Size 19.9MB
- Sample260710-m7azasa18s
- SHA256 241a184c2bf899bb03a8e2f487b5302b95b00aca6ba36d89571a8847f22c8bd2
- MD5 65d4f4f7bafc87fb40cdb786ada0cef1
- SHA1 ad8ddb0a883833358590ac258c2d51519b07f37a
- SHA512 1cc7f5fba7a25a9f34abb5f29f5cb98c7841ff1ccccaec439cc08ff789e4a4ec61a0a43b996dc7da63720b261166c0cb61ebdf12fcfdb4d66c6959c05071106b
- SSDEEP 393216:aY9udZVYtKXpW8uEBYFxVHFFF0711+TtIiFRCuARuA3dS9QVdyIJdt9XEEWr3XEI:ocYW8dYFrHFFF0Z1QtIcCuAHsMdyINdO
- TLSH T18827339CB3F204FAD8E9417A91E68692ABD674E643B4C7C72FE108934E172E5DE34740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TgWsProxy_windows.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
TgWsProxy_windows.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target TgWsProxy_windows.exe
- Size 19.9MB
- SHA256 241a184c2bf899bb03a8e2f487b5302b95b00aca6ba36d89571a8847f22c8bd2
- MD5 65d4f4f7bafc87fb40cdb786ada0cef1
- SHA1 ad8ddb0a883833358590ac258c2d51519b07f37a
- SHA512 1cc7f5fba7a25a9f34abb5f29f5cb98c7841ff1ccccaec439cc08ff789e4a4ec61a0a43b996dc7da63720b261166c0cb61ebdf12fcfdb4d66c6959c05071106b
- SSDEEP 393216:aY9udZVYtKXpW8uEBYFxVHFFF0711+TtIiFRCuARuA3dS9QVdyIJdt9XEEWr3XEI:ocYW8dYFrHFFF0Z1QtIcCuAHsMdyINdO
- TLSH T18827339CB3F204FAD8E9417A91E68692ABD674E643B4C7C72FE108934E172E5DE34740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.