General
- Target MicrosoftEdgeUpdate.exe
- Size 15.0MB
- Sample260724-te4jgahd56
- SHA256 4ad209caf8b3ea718892890a6cd0e589734833e6687d4a298d9a4e553a0af30e
- MD5 5f5845944a6e7d49939256ce8cc83c4c
- SHA1 617bf362f9ce7f89db258118cfb7674902bc0114
- SHA512 ad9735ecdeaaf8c50f935d9b93fd97434090c9a332251db4bbf9523fe979c5daed379625f298fd3424fca562f1b628fe082e7011a908ee736a73890f39d70867
- SSDEEP 393216:4p2DlwLkBLYrYsHKpUri9sXVwn8V2vjtqabeedgekW:4p2DlwLKLeYsHKpUri9x7vjTrkW
- TLSH T14EF6331640640DADFDA7D8B94D97E90FA772341A4320B9D727640A331E038F46F79DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MicrosoftEdgeUpdate.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
MicrosoftEdgeUpdate.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target MicrosoftEdgeUpdate.exe
- Size 15.0MB
- SHA256 4ad209caf8b3ea718892890a6cd0e589734833e6687d4a298d9a4e553a0af30e
- MD5 5f5845944a6e7d49939256ce8cc83c4c
- SHA1 617bf362f9ce7f89db258118cfb7674902bc0114
- SHA512 ad9735ecdeaaf8c50f935d9b93fd97434090c9a332251db4bbf9523fe979c5daed379625f298fd3424fca562f1b628fe082e7011a908ee736a73890f39d70867
- SSDEEP 393216:4p2DlwLkBLYrYsHKpUri9sXVwn8V2vjtqabeedgekW:4p2DlwLKLeYsHKpUri9x7vjTrkW
- TLSH T14EF6331640640DADFDA7D8B94D97E90FA772341A4320B9D727640A331E038F46F79DAB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Drops startup file
-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.