General
- Target TSBMacro.exe
- Size 69.4MB
- Sample260729-lnrx2as1c1
- SHA256 f9b73f11c5e38def7075b9f253145e46c25a3ee9fbb33f9eeb9a41557ba017d9
- MD5 a446905f96712bc12d151cbdd44757f2
- SHA1 9ce19de709154990b4e8a964fdb606288d4ad286
- SHA512 6cd09e0b8c8f4ea05d7b42c9b4b9e20513c36205037b46096d13956d50f17deccaac8e52ca4963cab463d4ca85e3e316f4fe55cddf1a1e23184d5b0619b5bc72
- SSDEEP 1572864:KsD+RBwXzTUX0w8mxmVEt7y1ubpCwC3dUup7tR00UJF:l+RBwXP5fmxiE5y1ipCwQ30z/
- TLSH T19DF72356E2FD00E8D5BAC0B8C6575617E7B1345917309BEB62648A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TSBMacro.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
TSBMacro.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target TSBMacro.exe
- Size 69.4MB
- SHA256 f9b73f11c5e38def7075b9f253145e46c25a3ee9fbb33f9eeb9a41557ba017d9
- MD5 a446905f96712bc12d151cbdd44757f2
- SHA1 9ce19de709154990b4e8a964fdb606288d4ad286
- SHA512 6cd09e0b8c8f4ea05d7b42c9b4b9e20513c36205037b46096d13956d50f17deccaac8e52ca4963cab463d4ca85e3e316f4fe55cddf1a1e23184d5b0619b5bc72
- SSDEEP 1572864:KsD+RBwXzTUX0w8mxmVEt7y1ubpCwC3dUup7tR00UJF:l+RBwXP5fmxiE5y1ipCwQ30z/
- TLSH T19DF72356E2FD00E8D5BAC0B8C6575617E7B1345917309BEB62648A692F33FE0AE3D310
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.