General
- Target setup.exe
- Size 1.4MB
- Sample260722-zagf2athpf
- SHA256 7f5d09c223cf679e840fd10fd223ba55068209d3c54cce34c7399b93277d1340
- MD5 a28aa39dd7b3883a6f5a9bf2755060e7
- SHA1 44dd345983ce5b159e8b73b60e5165c32cdc3ba2
- SHA512 d6cf269ac820c7b77eab58f6cd3fb7deb5aa8d481d8bdea5f83e37b9a69324fa49dffe199e869e0351be888d35f6fc23629b628cd138f8270fe35300eafc9698
- SSDEEP 24576:41VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3GcrR59H7USvx9f0:8QdhZgEN6GnJl9pO
- TLSH T1AF656B22A3918837D1732F759C6BC2946C257E602F74E54A7EB8AE0D1E38B417D393D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
setup.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
setup.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target setup.exe
- Size 1.4MB
- SHA256 7f5d09c223cf679e840fd10fd223ba55068209d3c54cce34c7399b93277d1340
- MD5 a28aa39dd7b3883a6f5a9bf2755060e7
- SHA1 44dd345983ce5b159e8b73b60e5165c32cdc3ba2
- SHA512 d6cf269ac820c7b77eab58f6cd3fb7deb5aa8d481d8bdea5f83e37b9a69324fa49dffe199e869e0351be888d35f6fc23629b628cd138f8270fe35300eafc9698
- SSDEEP 24576:41VqyG3T/+ofiDIZE2kChYYmpY9a2nWEdEC6GnJJ3GcrR59H7USvx9f0:8QdhZgEN6GnJl9pO
- TLSH T1AF656B22A3918837D1732F759C6BC2946C257E602F74E54A7EB8AE0D1E38B417D393D2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.