General
- Target csrss.exe
- Size 48KB
- Sample260729-ajq96acf95
- SHA256 c1c05f2c43045a6c9b4b64ec3cfb546e6b6ad8e6db0fc5d5726409aad4e35a32
- MD5 a454db56a036d8cb126970a84a52f7de
- SHA1 8de6cc417428fb24d5e664cd70c526cd653f09d1
- SHA512 cfab71b3dfd16eac4071f7a0a94b7ab00cb4bc2e3a77eb1b61009400e464bacddb978456848fb8663bbe24315da82fe9888af307f19a5c6e093a7dd8c641d166
- SSDEEP 768:KZJ0nljmVh1cmIC9jva7AN3qdbKAdLsKHiRvGO1LKKxTs6hBNuws:KQjU1cBC9jvaa3E/HiR+ON5Js
- TLSH T125233A0C77FC4A13FDBF4AB4A86221408BF1A5E55812D7991CCC91EEAEB7B50A701367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
csrss.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
csrss.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target csrss.exe
- Size 48KB
- SHA256 c1c05f2c43045a6c9b4b64ec3cfb546e6b6ad8e6db0fc5d5726409aad4e35a32
- MD5 a454db56a036d8cb126970a84a52f7de
- SHA1 8de6cc417428fb24d5e664cd70c526cd653f09d1
- SHA512 cfab71b3dfd16eac4071f7a0a94b7ab00cb4bc2e3a77eb1b61009400e464bacddb978456848fb8663bbe24315da82fe9888af307f19a5c6e093a7dd8c641d166
- SSDEEP 768:KZJ0nljmVh1cmIC9jva7AN3qdbKAdLsKHiRvGO1LKKxTs6hBNuws:KQjU1cBC9jvaa3E/HiR+ON5Js
- TLSH T125233A0C77FC4A13FDBF4AB4A86221408BF1A5E55812D7991CCC91EEAEB7B50A701367
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.