General
- Target DecoyRequest.exe
- Size 2.5MB
- Sample260728-v5fe1asybx
- SHA256 3f5faf0efb3ed952ca7e0d4f65e986a97eda8542c9a3758ba24065321adad692
- MD5 d4c12150f211d66276484f9af57bf0cf
- SHA1 4ec4943ef64747bf49bbb95e2bb75cd3192b4523
- SHA512 d8692864bed2b020cc932c21056f0ad1f2d3390cdb27644934de5e1df3afd424aa5feda8b790d72294d374a8b97693bc13f08296c093c4a2014842f80451a387
- SSDEEP 49152:NLjq/dlOM7qMjRnBJ/MzV47Zb/9BPABYVA77/RFkqXfd+/9AQBDjLAan/3/DR:N+dGMjRT/eV4dkTkqXf0FpLAWT
- TLSH T134C533D033B4586BE2AF65FCA63E50038737273385A5EBDC89E921DD097A78A0315B53
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
DecoyRequest.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
DecoyRequest.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target DecoyRequest.exe
- Size 2.5MB
- SHA256 3f5faf0efb3ed952ca7e0d4f65e986a97eda8542c9a3758ba24065321adad692
- MD5 d4c12150f211d66276484f9af57bf0cf
- SHA1 4ec4943ef64747bf49bbb95e2bb75cd3192b4523
- SHA512 d8692864bed2b020cc932c21056f0ad1f2d3390cdb27644934de5e1df3afd424aa5feda8b790d72294d374a8b97693bc13f08296c093c4a2014842f80451a387
- SSDEEP 49152:NLjq/dlOM7qMjRnBJ/MzV47Zb/9BPABYVA77/RFkqXfd+/9AQBDjLAan/3/DR:N+dGMjRT/eV4dkTkqXf0FpLAWT
- TLSH T134C533D033B4586BE2AF65FCA63E50038737273385A5EBDC89E921DD097A78A0315B53
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.