General
- Target TgWsProxy_windows_7_64bit (1).exe
- Size 16.5MB
- Sample260714-wapwmacv9z
- SHA256 537d821eb4d34d09499b4b8584cca58eeaec3aa77ac6bdb6d99e4f56c1299d3c
- MD5 3650473ff30f52477f65552df762f099
- SHA1 75b6c35a450871d5f890fd64bf8a0de12445916c
- SHA512 38a8d09d564b144ff718e7e562b249b3837df761dbc78fd791619e7c78b38d64b86eaf627b0ffe2a41f47090ba58aced30624dc58056e801b8fd0fb77b4ceb61
- SSDEEP 393216:XlLSssFVL7pUTLfhJiCEDjJ83a10RtN3ZWqaxksx0KYTXjJZ:1LSssFVBUTLJUCEDFEa6tN3PaxkU0LZ
- TLSH T1990733CACB521811FC33933E79E9883AC96374FD8365672B193D1493299B2799D78F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TgWsProxy_windows_7_64bit (1).exe
Resource
win10v2004-20260513-en
8 signatures
900 seconds
Behavioral task
behavioral2
Sample
TgWsProxy_windows_7_64bit (1).exe
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target TgWsProxy_windows_7_64bit (1).exe
- Size 16.5MB
- SHA256 537d821eb4d34d09499b4b8584cca58eeaec3aa77ac6bdb6d99e4f56c1299d3c
- MD5 3650473ff30f52477f65552df762f099
- SHA1 75b6c35a450871d5f890fd64bf8a0de12445916c
- SHA512 38a8d09d564b144ff718e7e562b249b3837df761dbc78fd791619e7c78b38d64b86eaf627b0ffe2a41f47090ba58aced30624dc58056e801b8fd0fb77b4ceb61
- SSDEEP 393216:XlLSssFVL7pUTLfhJiCEDjJ83a10RtN3ZWqaxksx0KYTXjJZ:1LSssFVBUTLJUCEDFEa6tN3PaxkU0LZ
- TLSH T1990733CACB521811FC33933E79E9883AC96374FD8365672B193D1493299B2799D78F02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.