General
- Target Kurulum.exe
- Size 1.9MB
- Sample260727-2le4fsttd1
- SHA256 a1b6172a12f4fe82a55c77b054520968648d2faa41446d669dc86a2b667268f2
- MD5 b5e5bf9d423f9936969283439a158380
- SHA1 29ec851a873be48f2f6142bb9064d47a43ab95a7
- SHA512 375861cacc933d1ca886d82d75a74d2525290e2ab8d3f08ab6041fd8628dc48dc37d1d390f2fd90878640a55702e8a1e3357a38900afe7919ecc952824ab4c97
- SSDEEP 49152:o6xcx0RWhne8jOxSNFYCC77WS0e4vkxzLYtW0ejawMgHrQ+j:o6Ide88iOCCVh/awHsI
- TLSH T1B1950259D7E505F9E0B3E1B4CD934812EB777C491771E68F03AC69A61F232A08E39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Kurulum.exe
Resource
win10v2004-20260513-en
1 signatures
30 seconds
Behavioral task
behavioral2
Sample
Kurulum.exe
Resource
win11ltsc2024-20260709-en
7 signatures
30 seconds
Malware Config
Targets
-
- Target Kurulum.exe
- Size 1.9MB
- SHA256 a1b6172a12f4fe82a55c77b054520968648d2faa41446d669dc86a2b667268f2
- MD5 b5e5bf9d423f9936969283439a158380
- SHA1 29ec851a873be48f2f6142bb9064d47a43ab95a7
- SHA512 375861cacc933d1ca886d82d75a74d2525290e2ab8d3f08ab6041fd8628dc48dc37d1d390f2fd90878640a55702e8a1e3357a38900afe7919ecc952824ab4c97
- SSDEEP 49152:o6xcx0RWhne8jOxSNFYCC77WS0e4vkxzLYtW0ejawMgHrQ+j:o6Ide88iOCCVh/awHsI
- TLSH T1B1950259D7E505F9E0B3E1B4CD934812EB777C491771E68F03AC69A61F232A08E39B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.