General
- Target $tarFree.exe
- Size 24.0MB
- Sample260721-xq9fmsgq3v
- SHA256 4f8febdf55ff38a4d910ad7dd7ff93644212d6a91c1b05ef7b29a284c11d2f9c
- MD5 7ece5d1e2a18a39d5c027190c8cf7fd5
- SHA1 4b4fba2d4e146e3517aa044b46677810878bab3c
- SHA512 e8b868431fc197b6bc69bb91b4e10530617cac51a59d42ae7adff1b7c937a7a87d0b5556a565babdb7f8fd85bd0833842519ead268e3d65179f2571a46f0ef16
- SSDEEP 786432:s8J8uGaEkzm9NnDwNrUrhzS5EupoVvGqzleirJFgT1a:sONxzAnDvGCuGFGK+
- TLSH T1C8473330F0F33CBAD00B9A79B5C33841B189F8B5462DE671511EF8AE6F7686092D51DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
$tarFree.exe
Resource
win10v2004-20260513-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
$tarFree.exe
Resource
win11ltsc2024-20260709-en
2 signatures
900 seconds
Malware Config
Targets
-
- Target $tarFree.exe
- Size 24.0MB
- SHA256 4f8febdf55ff38a4d910ad7dd7ff93644212d6a91c1b05ef7b29a284c11d2f9c
- MD5 7ece5d1e2a18a39d5c027190c8cf7fd5
- SHA1 4b4fba2d4e146e3517aa044b46677810878bab3c
- SHA512 e8b868431fc197b6bc69bb91b4e10530617cac51a59d42ae7adff1b7c937a7a87d0b5556a565babdb7f8fd85bd0833842519ead268e3d65179f2571a46f0ef16
- SSDEEP 786432:s8J8uGaEkzm9NnDwNrUrhzS5EupoVvGqzleirJFgT1a:sONxzAnDvGCuGFGK+
- TLSH T1C8473330F0F33CBAD00B9A79B5C33841B189F8B5462DE671511EF8AE6F7686092D51DA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.