General
- Target vendetta utility.exe
- Size 12.2MB
- Sample260723-wbnd7a11ht
- SHA256 7846c7d1e781108139fa9fee7c5bc17a1bcd5c54a0b06d5f2aa46fff25e13fc1
- MD5 1b093bd39700cbb680a020af2f02eab3
- SHA1 f5ee6ef4476f329330c9d4c72b916ae7c448a038
- SHA512 a4c097c7d6a4951428f9adf830e5858a7c992a80e3badbca22aae84b158be315b082e4b921d731577ec1d1f20f4045537e2c97fae802ba787e5e55b14f8313b0
- SSDEEP 393216:+hLRsLbXEAphVtnIUQSg+S5t7PvF7dvxlL:GliRphDto+S5tDvF7Z
- TLSH T14FD633E8B3C059BAE8F2843D6E95D950E3F1B5002F56D2EF0BA40E152D3BA944D3D7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
vendetta utility.exe
Resource
win10ltsc2021-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
vendetta utility.exe
Resource
win11-20260513-en
5 signatures
900 seconds
Malware Config
Targets
-
- Target vendetta utility.exe
- Size 12.2MB
- SHA256 7846c7d1e781108139fa9fee7c5bc17a1bcd5c54a0b06d5f2aa46fff25e13fc1
- MD5 1b093bd39700cbb680a020af2f02eab3
- SHA1 f5ee6ef4476f329330c9d4c72b916ae7c448a038
- SHA512 a4c097c7d6a4951428f9adf830e5858a7c992a80e3badbca22aae84b158be315b082e4b921d731577ec1d1f20f4045537e2c97fae802ba787e5e55b14f8313b0
- SSDEEP 393216:+hLRsLbXEAphVtnIUQSg+S5t7PvF7dvxlL:GliRphDto+S5tDvF7Z
- TLSH T14FD633E8B3C059BAE8F2843D6E95D950E3F1B5002F56D2EF0BA40E152D3BA944D3D7A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.