General
- Target servernwe.exe
- Size 6.3MB
- Sample260712-a2na8abw5p
- SHA256 fffa0fcafdbdbaaa9d5f3db34b81553ff9c922fbe6921b3b6203258eaba879a5
- MD5 c980425a9236b95b0f719d95d0058137
- SHA1 7c1c75af5b3a8271290066b5947c026cb038b195
- SHA512 22e434d5c4fe0f602bbc905b061878db0e2c2130ac807edf5e8b6e0187ad4273510181d9945a1ac8e633ca99675ba8a93f4caed5427e357845125dd269f7364f
- SSDEEP 49152:J4+iwgMLkIEPdLBx+GhGfdRyWF7jFz4URJzMQRf10DS3N0xnstj5Q2BsJKWxLh5w:fi34Hct+0UdRys7hzj5NsJKUbXSE5K
- TLSH T1E5665A11FE8B45FAE903183106A7727F67344D068B24DBD7EB407E6EF8BB291193A245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
servernwe.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
servernwe.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target servernwe.exe
- Size 6.3MB
- SHA256 fffa0fcafdbdbaaa9d5f3db34b81553ff9c922fbe6921b3b6203258eaba879a5
- MD5 c980425a9236b95b0f719d95d0058137
- SHA1 7c1c75af5b3a8271290066b5947c026cb038b195
- SHA512 22e434d5c4fe0f602bbc905b061878db0e2c2130ac807edf5e8b6e0187ad4273510181d9945a1ac8e633ca99675ba8a93f4caed5427e357845125dd269f7364f
- SSDEEP 49152:J4+iwgMLkIEPdLBx+GhGfdRyWF7jFz4URJzMQRf10DS3N0xnstj5Q2BsJKWxLh5w:fi34Hct+0UdRys7hzj5NsJKUbXSE5K
- TLSH T1E5665A11FE8B45FAE903183106A7727F67344D068B24DBD7EB407E6EF8BB291193A245
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application