General
- Target client.exe
- Size 1.0MB
- Sample260727-ryl3esgk31
- SHA256 9aa99b4afad939af69b79636d9c25055be37bcad06a45996ecca1e5d86f00b4a
- MD5 0be6b41d13975a7c25b2bca972ea826f
- SHA1 0f2b48489aac5f42de94ba415aa34d82988a0c53
- SHA512 a46d2802da6e652936ff53a22fc757bb28de3d8a0313423933f3fce66d5bd34300646418e986a0b1bc0aad2133f2c2bc6bf64f405a879e63e8104bea921b88b5
- SSDEEP 12288:521RxtWSekWqzVeKg8qzHsAtxruRjum1/uRm2CA6l:IDWScqzm8qzHsAtY9gGl
- TLSH T156353B17E35344ECC63AC1B1436B5272FD71F42A45346A2EAE95DF312F21E610A6EFA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
client.exe
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
Malware Config
Targets
-
- Target client.exe
- Size 1.0MB
- SHA256 9aa99b4afad939af69b79636d9c25055be37bcad06a45996ecca1e5d86f00b4a
- MD5 0be6b41d13975a7c25b2bca972ea826f
- SHA1 0f2b48489aac5f42de94ba415aa34d82988a0c53
- SHA512 a46d2802da6e652936ff53a22fc757bb28de3d8a0313423933f3fce66d5bd34300646418e986a0b1bc0aad2133f2c2bc6bf64f405a879e63e8104bea921b88b5
- SSDEEP 12288:521RxtWSekWqzVeKg8qzHsAtxruRjum1/uRm2CA6l:IDWScqzm8qzHsAtY9gGl
- TLSH T156353B17E35344ECC63AC1B1436B5272FD71F42A45346A2EAE95DF312F21E610A6EFA0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Drops startup file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.