General
- Target immoofk by eu4oria.exe
- Size 696KB
- Sample260729-ssqzvsae86
- SHA256 02dfae45aef3c34dd2a1c0ad1e5bb2af2b9971d1312c50ebdc2c3a1708678ce4
- MD5 f83fc9e1c2b0cf86d31bd8a0e2a8f545
- SHA1 bb06c99e708b8d1fe55b3e79dccad4fa8e5c3fb6
- SHA512 69392956196d4dc8cb3a8edca6f5422b079e0197c5d920c9a0e3a77b96d2f52055c2f95f18195d38d41dfa6c027c2f76c0f7296e2a3d17576565d7d7a7857f66
- SSDEEP 12288:Bv2654CufOl1gaxUqXsBZ6ND4BbR8WgYkECWki92Ku/dy4CVH+yFczYEj:d2654C4O04UwsBwhvVdmVH+ywD
- TLSH T194E4234BEB6B0458C075C6BAC4978DBBF63BB858475527CB17042E2A1EB93C4C238F85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
immoofk by eu4oria.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target immoofk by eu4oria.exe
- Size 696KB
- SHA256 02dfae45aef3c34dd2a1c0ad1e5bb2af2b9971d1312c50ebdc2c3a1708678ce4
- MD5 f83fc9e1c2b0cf86d31bd8a0e2a8f545
- SHA1 bb06c99e708b8d1fe55b3e79dccad4fa8e5c3fb6
- SHA512 69392956196d4dc8cb3a8edca6f5422b079e0197c5d920c9a0e3a77b96d2f52055c2f95f18195d38d41dfa6c027c2f76c0f7296e2a3d17576565d7d7a7857f66
- SSDEEP 12288:Bv2654CufOl1gaxUqXsBZ6ND4BbR8WgYkECWki92Ku/dy4CVH+yFczYEj:d2654C4O04UwsBwhvVdmVH+ywD
- TLSH T194E4234BEB6B0458C075C6BAC4978DBBF63BB858475527CB17042E2A1EB93C4C238F85
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.