General
- Target Loader.exe
- Size 10.1MB
- Sample260712-rrmelsdw5w
- SHA256 169cfa452f56bca786a315eb5c13ffd3de4fe9c7ea789f799d4c443de2752fc7
- MD5 d6b3ef3190dd4f294b5afe4e03222018
- SHA1 ec0a1d57c87f349293b08a822b26d707f42148d3
- SHA512 075172680034edaec711dca5ce2cbe4437f335bc6cced2e2cafa41431024215a89f582c586680050f0894ed51a968ea5a498d4de05848381d3a717056225b7da
- SSDEEP 196608:wy8M78DNrCaUI0/ToUIoDTCOAwrvNx6p0Vs+4EmxMaOkJvc:x8M78DTUIEo2HpAgSgcEIL
- TLSH T139B623E75C7A4093DD8B1AF9958E2F9E57C0F0429C3925253BC5180BDE35FDE868B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 10.1MB
- SHA256 169cfa452f56bca786a315eb5c13ffd3de4fe9c7ea789f799d4c443de2752fc7
- MD5 d6b3ef3190dd4f294b5afe4e03222018
- SHA1 ec0a1d57c87f349293b08a822b26d707f42148d3
- SHA512 075172680034edaec711dca5ce2cbe4437f335bc6cced2e2cafa41431024215a89f582c586680050f0894ed51a968ea5a498d4de05848381d3a717056225b7da
- SSDEEP 196608:wy8M78DNrCaUI0/ToUIoDTCOAwrvNx6p0Vs+4EmxMaOkJvc:x8M78DTUIEo2HpAgSgcEIL
- TLSH T139B623E75C7A4093DD8B1AF9958E2F9E57C0F0429C3925253BC5180BDE35FDE868B222
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger