General
- Target femboylose.exe
- Size 5.4MB
- Sample260723-xla3aattbx
- SHA256 d601a3cfb04d0e0b8c91dee2fa1e6dd597575a99b398844b934082fbed01f4b5
- MD5 9332f641c2caa93fb1df8403ed462c3f
- SHA1 779c3f8a9f1e060ceee20693a699ee26319d407c
- SHA512 698cbf108c821b26555a69f9767c85050a9fcb6c9aaf7b4b6b11c3ca3d6df8f522bf7eb40fb6c23aef77c9de4a0560a880fc96fa6f51207a2a93f1b9cb51838e
- SSDEEP 49152:pTWBNQCPdvzO+9UOK8Zr4U4A3yYYJmQjFj64x8tzZZB5vsh+pUVw+mFIwYt0cOLo:wMWjJ4xAN7+TFt0TCcD+/n+M
- TLSH T14E467D03F26181E8C06EC174C35AA637E732BC89493476AB5BE47B212E7AF506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
femboylose.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
femboylose.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target femboylose.exe
- Size 5.4MB
- SHA256 d601a3cfb04d0e0b8c91dee2fa1e6dd597575a99b398844b934082fbed01f4b5
- MD5 9332f641c2caa93fb1df8403ed462c3f
- SHA1 779c3f8a9f1e060ceee20693a699ee26319d407c
- SHA512 698cbf108c821b26555a69f9767c85050a9fcb6c9aaf7b4b6b11c3ca3d6df8f522bf7eb40fb6c23aef77c9de4a0560a880fc96fa6f51207a2a93f1b9cb51838e
- SSDEEP 49152:pTWBNQCPdvzO+9UOK8Zr4U4A3yYYJmQjFj64x8tzZZB5vsh+pUVw+mFIwYt0cOLo:wMWjJ4xAN7+TFt0TCcD+/n+M
- TLSH T14E467D03F26181E8C06EC174C35AA637E732BC89493476AB5BE47B212E7AF506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.