General
- Target Wand-Setup.exe
- Size 169KB
- Sample260712-e6w65scy9l
- SHA256 6404f4209eb4a830a1be587c7107e7b8c840f2387c571a4b0250f5092435af1f
- MD5 0852ad3044d8308068fb79e000c976b1
- SHA1 1de17d9aa6409e1a0366f2ed2fdda09493cfb9f3
- SHA512 f70099cba3e7a5900bab8ebe7124ac3feb914b2169f8bd62f4d41af57a5497c6efa588dc060497282cde6205a4f3cb16e7ca686a24c6f2749ac6e55e5fc640e7
- SSDEEP 1536:lJJLxy9zyuQycljyaYeNl6amgLMbtYcR/8t/QiT0FN1E3ry9zyuQyNVEn7:5Lx45QyUyhaEtHZn20FbE3r45QyEn
- TLSH T17704ADD4F7F905EEE67B8DB24C310DB016B7BC8205D5DC4A2A84B0B98663754143ABAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Wand-Setup.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
Wand-Setup.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Wand-Setup.exe
- Size 169KB
- SHA256 6404f4209eb4a830a1be587c7107e7b8c840f2387c571a4b0250f5092435af1f
- MD5 0852ad3044d8308068fb79e000c976b1
- SHA1 1de17d9aa6409e1a0366f2ed2fdda09493cfb9f3
- SHA512 f70099cba3e7a5900bab8ebe7124ac3feb914b2169f8bd62f4d41af57a5497c6efa588dc060497282cde6205a4f3cb16e7ca686a24c6f2749ac6e55e5fc640e7
- SSDEEP 1536:lJJLxy9zyuQycljyaYeNl6amgLMbtYcR/8t/QiT0FN1E3ry9zyuQyNVEn7:5Lx45QyUyhaEtHZn20FbE3r45QyEn
- TLSH T17704ADD4F7F905EEE67B8DB24C310DB016B7BC8205D5DC4A2A84B0B98663754143ABAF
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.