General
- Target upgrade.exe
- Size 208KB
- Sample260718-d4fwpsez6j
- SHA256 624b0dd70e0f69b97e1525debeb6692d8d04d81f028b269f30f3c540ab219574
- MD5 31a475800721d19bde7a4714427a6faf
- SHA1 54dcf18efe7643b2a5f7e62353f144deaa3eb323
- SHA512 9be1d12e0c7af94a2b46602f76520a8df557e55cf9ccfd10ba4372b71fc913819d0ae698524ecec1ddb618dda489ae2bb0c58416d4bf197336ddb0bb8e0fc668
- SSDEEP 1536:Q9utIzoQpp7iT9+aLNKmYeL0Jg5IUYVia1KYRl5o1iKc+H3sW7saHdohRzkg5d7T:Q9ukF7PaLdOViYiH3sCdqRF3tdo7K
- TLSH T19924BF7172C4C09EC4AB557C9D87FA9967E2FE6ACC219A4773A03F8F36357029901293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
upgrade.exe
Resource
win10v2004-20260513-en
4 signatures
60 seconds
Behavioral task
behavioral2
Sample
upgrade.exe
Resource
win11ltsc2024-20260709-en
3 signatures
60 seconds
Malware Config
Targets
-
- Target upgrade.exe
- Size 208KB
- SHA256 624b0dd70e0f69b97e1525debeb6692d8d04d81f028b269f30f3c540ab219574
- MD5 31a475800721d19bde7a4714427a6faf
- SHA1 54dcf18efe7643b2a5f7e62353f144deaa3eb323
- SHA512 9be1d12e0c7af94a2b46602f76520a8df557e55cf9ccfd10ba4372b71fc913819d0ae698524ecec1ddb618dda489ae2bb0c58416d4bf197336ddb0bb8e0fc668
- SSDEEP 1536:Q9utIzoQpp7iT9+aLNKmYeL0Jg5IUYVia1KYRl5o1iKc+H3sW7saHdohRzkg5d7T:Q9ukF7PaLdOViYiH3sCdqRF3tdo7K
- TLSH T19924BF7172C4C09EC4AB557C9D87FA9967E2FE6ACC219A4773A03F8F36357029901293
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.