General
- Target cygrat.exe
- Size 112.6MB
- Sample260722-m2h3qadh83
- SHA256 502fb18a617914ef3ea3c3a2a7f9818e0fce3f3367d9bc499230f241f011c670
- MD5 081ea1eae9005be219be2ed56d21854d
- SHA1 a969327d8b3786df1fd204c6febb89591d59826e
- SHA512 19a70ed86fca433a2957d96674165b39523d60fe3fcce83283df08fd69b154d937c053ec25566871a3515c56b8bfc8304547a47de997a4966f2ff69fd0f05b10
- SSDEEP 3145728:Xpv7ig9NX0qelKbDSc/iFEDhvqzovc32QY4:XR7t9h0qIKTbD+zfY
- TLSH T1764833916E02D05BF489C23B96E18E19E8A77CB929C25ACF12F405773D973C9583E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cygrat.exe
Resource
win10ltsc2021-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target cygrat.exe
- Size 112.6MB
- SHA256 502fb18a617914ef3ea3c3a2a7f9818e0fce3f3367d9bc499230f241f011c670
- MD5 081ea1eae9005be219be2ed56d21854d
- SHA1 a969327d8b3786df1fd204c6febb89591d59826e
- SHA512 19a70ed86fca433a2957d96674165b39523d60fe3fcce83283df08fd69b154d937c053ec25566871a3515c56b8bfc8304547a47de997a4966f2ff69fd0f05b10
- SSDEEP 3145728:Xpv7ig9NX0qelKbDSc/iFEDhvqzovc32QY4:XR7t9h0qIKTbD+zfY
- TLSH T1764833916E02D05BF489C23B96E18E19E8A77CB929C25ACF12F405773D973C9583E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.