General
- Target hello.exe
- Size 37.0MB
- Sample260722-bs432shd76
- SHA256 30f993d3c9fbcb3bb31dc5c3685c9ad36b0ec8bd9c923307536810807c72419a
- MD5 c826c3b7524debf3194c90a0277e13a8
- SHA1 f58a28c3025ff65cb03e167cfc22efe7c5fc3cb7
- SHA512 61eb4236596ebca1417e27a0598ac424c949cc732a763cba2d105903fbe5c3a49ac1cff84405a3d2a55c6bdedfaa7eb51a374aa3029b813b9aa826ce3568a991
- SSDEEP 786432:tvgPbW8OLAAfJukK+9q77k6pSHtLFYpiP/m4XLaxyMPurUmLHy2l:t4PbWbff8+h6pSNBYpGmALEiS2l
- TLSH T1648733E86F03057FF495123AA3D7D13A96B375EB4379C8EF46A40A061A572CBE932710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
hello.exe
Resource
win11ltsc2024-20260709-en
7 signatures
300 seconds
Malware Config
Targets
-
- Target hello.exe
- Size 37.0MB
- SHA256 30f993d3c9fbcb3bb31dc5c3685c9ad36b0ec8bd9c923307536810807c72419a
- MD5 c826c3b7524debf3194c90a0277e13a8
- SHA1 f58a28c3025ff65cb03e167cfc22efe7c5fc3cb7
- SHA512 61eb4236596ebca1417e27a0598ac424c949cc732a763cba2d105903fbe5c3a49ac1cff84405a3d2a55c6bdedfaa7eb51a374aa3029b813b9aa826ce3568a991
- SSDEEP 786432:tvgPbW8OLAAfJukK+9q77k6pSHtLFYpiP/m4XLaxyMPurUmLHy2l:t4PbWbff8+h6pSNBYpGmALEiS2l
- TLSH T1648733E86F03057FF495123AA3D7D13A96B375EB4379C8EF46A40A061A572CBE932710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.