General
- Target BlackOpsPRFEditor.exe
- Size 814KB
- Sample260716-eav9zafy8w
- SHA256 5bfca535b2d2bd12bc92d1d9eeea99ed6652898f78e80b6c48b28106bacb32a9
- MD5 c9dc23d7bf9c4606445687dcb0d52e39
- SHA1 fefdb32d09a3052b7d1ddf1627ff778afad9a92e
- SHA512 1a14f9b76883dc2b2a7080146f05f87c69d12d467caad1b4630685d95c87f9e19801f0b3ddacd73bdadde78b645c8ed5348ea92cd55b728b838f203d0fbf52e0
- SSDEEP 12288:ODYuK2pr9ar2tJyDYuK2pr9ar2tJyDYuK2pr9ar2tJ:ODYurzRyDYurzRyDYurzR
- TLSH T126059E150A5B8B17E266B67C45F0F32E42B8C7D02837DEC1DE92059ADE9CB84F9345D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BlackOpsPRFEditor.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target BlackOpsPRFEditor.exe
- Size 814KB
- SHA256 5bfca535b2d2bd12bc92d1d9eeea99ed6652898f78e80b6c48b28106bacb32a9
- MD5 c9dc23d7bf9c4606445687dcb0d52e39
- SHA1 fefdb32d09a3052b7d1ddf1627ff778afad9a92e
- SHA512 1a14f9b76883dc2b2a7080146f05f87c69d12d467caad1b4630685d95c87f9e19801f0b3ddacd73bdadde78b645c8ed5348ea92cd55b728b838f203d0fbf52e0
- SSDEEP 12288:ODYuK2pr9ar2tJyDYuK2pr9ar2tJyDYuK2pr9ar2tJ:ODYurzRyDYurzRyDYurzR
- TLSH T126059E150A5B8B17E266B67C45F0F32E42B8C7D02837DEC1DE92059ADE9CB84F9345D8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.