General
- Target u0050p7.dds
- Size 4.0MB
- Sample260719-xpymract41
- SHA256 58f9dbd70172b4d09c1af5d2d91338845ef953af82cfdd06c9ac95a0e8607e0e
- MD5 f4d0c62213884dfa1f9b701bf8b23f75
- SHA1 09fe4f5259afef3cf8d607cb0e4e50f70ebd603f
- SHA512 4760445a43052866765abe075413cbd5cc054d48272b6fffa16374fdea14c5aa4b9c25cd826abb9949fcc9c9b4ac55a4b81e4353cf150ec11ba74baecc6b0a58
- SSDEEP 12288:UXOE2pUxI7C1qjWeEYwN7qJA9+JcJFRyz7gHXSwdyTUWeIGnvn/TOAUj233Jtiel:ZE26qjWlYuqCoc7wH4vPFxzxJ3JCfEoo
- TLSH T12216EB401F7AE11F12D0A3ACA6399AF4DD9BCFF1C4F05EE3E5B73925867A45042258E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
u0050p7.dds
Resource
win10v2004-20260513-en
23 signatures
150 seconds
Behavioral task
behavioral2
Sample
u0050p7.dds
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target u0050p7.dds
- Size 4.0MB
- SHA256 58f9dbd70172b4d09c1af5d2d91338845ef953af82cfdd06c9ac95a0e8607e0e
- MD5 f4d0c62213884dfa1f9b701bf8b23f75
- SHA1 09fe4f5259afef3cf8d607cb0e4e50f70ebd603f
- SHA512 4760445a43052866765abe075413cbd5cc054d48272b6fffa16374fdea14c5aa4b9c25cd826abb9949fcc9c9b4ac55a4b81e4353cf150ec11ba74baecc6b0a58
- SSDEEP 12288:UXOE2pUxI7C1qjWeEYwN7qJA9+JcJFRyz7gHXSwdyTUWeIGnvn/TOAUj233Jtiel:ZE26qjWlYuqCoc7wH4vPFxzxJ3JCfEoo
- TLSH T12216EB401F7AE11F12D0A3ACA6399AF4DD9BCFF1C4F05EE3E5B73925867A45042258E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.