General
- Target CodeWalker RPF Explorer.exe
- Size 21KB
- Sample260724-vqhxkshf57
- SHA256 c9c925524f950f4881c99fdb8732323da6048287c7d19f7d8ef9a441eba25047
- MD5 05c358a1b353b81743fca73379e5a3ae
- SHA1 0ff603390f4f795fb73900c928e2c300e18cb0ce
- SHA512 fd80b11aba4cf45ffe5aa79d129690f5c5d4155a362959a00213f35e4e2bdeb614657e9403041a866df73d05af4556fb392a536fc2dca39c0bb7b156fe21f682
- SSDEEP 192:iGmMdNaZ/UXBD6in7Onh6YYYY2zughoLkVjgfT2OcLOK9Mw4VT1WcUiN3AdlbG4Q:iGm//UBDD7u6MzVcWLNr+el9z
- TLSH T10AA2F682528047A9E5295F3508320FD867FABF897D68F78CAC08B6673FF37E46111644
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CodeWalker RPF Explorer.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
CodeWalker RPF Explorer.exe
Resource
win11ltsc2024-20260710-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target CodeWalker RPF Explorer.exe
- Size 21KB
- SHA256 c9c925524f950f4881c99fdb8732323da6048287c7d19f7d8ef9a441eba25047
- MD5 05c358a1b353b81743fca73379e5a3ae
- SHA1 0ff603390f4f795fb73900c928e2c300e18cb0ce
- SHA512 fd80b11aba4cf45ffe5aa79d129690f5c5d4155a362959a00213f35e4e2bdeb614657e9403041a866df73d05af4556fb392a536fc2dca39c0bb7b156fe21f682
- SSDEEP 192:iGmMdNaZ/UXBD6in7Onh6YYYY2zughoLkVjgfT2OcLOK9Mw4VT1WcUiN3AdlbG4Q:iGm//UBDD7u6MzVcWLNr+el9z
- TLSH T10AA2F682528047A9E5295F3508320FD867FABF897D68F78CAC08B6673FF37E46111644
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.