General
- Target FlueNuker.exe
- Size 11.8MB
- Sample260719-etwpvaes5y
- SHA256 9700f933689e08b7a953f1477735bd3bd883b5636fa407ae106e6e21c8ba8fe0
- MD5 4675ed185cf5b6318901c8a0cd5c763c
- SHA1 38e29572ef109acb899d2b9fb2cb3e7e131dce2c
- SHA512 987e91182106e32cf674a9bd569dc7827da90f6d919f8d06a46fb3df1173b91491b8cfcad50547466ae39d9a314abbe42e5fe5cac70ab887dbc9d29c39c33dce
- SSDEEP 196608:Bi8F9dvlA7JN3yp81aPZmsDGm1X4U9TlOLJWBGMMGbqiqoTUinJBxdqpc24a:vFTvCqNG+XF9TlAMMkUMJopc24
- TLSH T12BC63398D35104F8DAA64678F882531F73B1A5A30F9583A723A095F35F239E34F3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FlueNuker.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target FlueNuker.exe
- Size 11.8MB
- SHA256 9700f933689e08b7a953f1477735bd3bd883b5636fa407ae106e6e21c8ba8fe0
- MD5 4675ed185cf5b6318901c8a0cd5c763c
- SHA1 38e29572ef109acb899d2b9fb2cb3e7e131dce2c
- SHA512 987e91182106e32cf674a9bd569dc7827da90f6d919f8d06a46fb3df1173b91491b8cfcad50547466ae39d9a314abbe42e5fe5cac70ab887dbc9d29c39c33dce
- SSDEEP 196608:Bi8F9dvlA7JN3yp81aPZmsDGm1X4U9TlOLJWBGMMGbqiqoTUinJBxdqpc24a:vFTvCqNG+XF9TlAMMkUMJopc24
- TLSH T12BC63398D35104F8DAA64678F882531F73B1A5A30F9583A723A095F35F239E34F3AB51
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates processes with tasklist