General
- Target ToniraWin.exe
- Size 139.6MB
- Sample260717-rh4mjagy4v
- SHA256 a1030c3b91732039271cc2d9c133878e87738b7b0ca41ec109c38c753a9f171b
- MD5 18d77ae476bd1ff4a175982d919b889f
- SHA1 3d27dd0bd42a5fb246c9e0cb19e9fad30b1b3c4a
- SHA512 2dc61ccbc4a126fc9af250a0e02edbe07039cf6a85c12fb9aabe926231891c5df2de76cd02086bf519a3b6e9f6b1db6423e5e5fccbf91aa3330c1221766c3d85
- SSDEEP 786432:PBdSr/5RVvsZXCZMeQ6mtYptgPV1k+NWtaS9j0xdUKitB5Le2vuxTiO9:PBdSL5jsZXoQPNWtaS9jYq5LelTiO9
- TLSH T11268AE0177F6A563D1679179869FA002FB31B0032734DAC7366C8364AF53EE46EBAB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ToniraWin.exe
Resource
win11-20260513-en
9 signatures
300 seconds
Malware Config
Targets
-
- Target ToniraWin.exe
- Size 139.6MB
- SHA256 a1030c3b91732039271cc2d9c133878e87738b7b0ca41ec109c38c753a9f171b
- MD5 18d77ae476bd1ff4a175982d919b889f
- SHA1 3d27dd0bd42a5fb246c9e0cb19e9fad30b1b3c4a
- SHA512 2dc61ccbc4a126fc9af250a0e02edbe07039cf6a85c12fb9aabe926231891c5df2de76cd02086bf519a3b6e9f6b1db6423e5e5fccbf91aa3330c1221766c3d85
- SSDEEP 786432:PBdSr/5RVvsZXCZMeQ6mtYptgPV1k+NWtaS9j0xdUKitB5Le2vuxTiO9:PBdSL5jsZXoQPNWtaS9jYq5LelTiO9
- TLSH T11268AE0177F6A563D1679179869FA002FB31B0032734DAC7366C8364AF53EE46EBAB14
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.