General
- Target Fih.exe
- Size 71.0MB
- Sample260720-xgcejscs2j
- SHA256 eea721b915e863942cdf5dd8b27482752c87c0cc511b369240a800b83bde34a0
- MD5 6e3ce26e52c787f24086e40f6f83321e
- SHA1 09543aad326c5749b2498986108c7acc87151cf2
- SHA512 08f81f32d436c171df80a1894edac76472be12033deef380fe61f16c2fb53a7ddc40f90d555d0fa8f882f0facae87fb7175e9eb683bbbc76a0bdff139d1172de
- SSDEEP 1572864:nPas/X2heCZyFkWXYFzFFd3P3R8fNknAnZ2yOogqTcaNH21A/VnGCnkfK4C2yGF6:fPCZyFkfRj/h8fNknAnIdA7lxNGCnkSP
- TLSH T1DCF7338DBFC16185F69E573BA1C6C926BEB8F6890207406797A40C761F131E3E67DA30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Fih.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target Fih.exe
- Size 71.0MB
- SHA256 eea721b915e863942cdf5dd8b27482752c87c0cc511b369240a800b83bde34a0
- MD5 6e3ce26e52c787f24086e40f6f83321e
- SHA1 09543aad326c5749b2498986108c7acc87151cf2
- SHA512 08f81f32d436c171df80a1894edac76472be12033deef380fe61f16c2fb53a7ddc40f90d555d0fa8f882f0facae87fb7175e9eb683bbbc76a0bdff139d1172de
- SSDEEP 1572864:nPas/X2heCZyFkWXYFzFFd3P3R8fNknAnZ2yOogqTcaNH21A/VnGCnkfK4C2yGF6:fPCZyFkfRj/h8fNknAnIdA7lxNGCnkSP
- TLSH T1DCF7338DBFC16185F69E573BA1C6C926BEB8F6890207406797A40C761F131E3E67DA30
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.