General
- Target f.exe
- Size 31.2MB
- Sample260729-xzf6fss1ew
- SHA256 bdc32b10ffd8b6210b7d2f8bd93aec4a474e8c2ebec4bbe8d4b3bd338537cad3
- MD5 fa111993b673a33fb80ca53054ce8cb8
- SHA1 9a7d9160f1eb8b282c079956d62ae430d25e998b
- SHA512 5ee0257611c1fbfe100b232d6d5fb19b4c5d7c8388166050adb6ba44776bc241158a516a25b14998dab1c8ee8f4f728bbe6bed4163452bcd2470860d24f171b9
- SSDEEP 786432:3pLRvjXoRldWzctZYcW8xifa7KZqnGCnkJGRKyZi2nRrV6kv5bNO0jrejMBM3:3pIbWXa7KZqnGCnkJGHNO0jrejMM
- TLSH T1E17733F57AC204D2EACA057D84D6A97672E4BBB603B080DB25F54C221D631E6FD7CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
f.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target f.exe
- Size 31.2MB
- SHA256 bdc32b10ffd8b6210b7d2f8bd93aec4a474e8c2ebec4bbe8d4b3bd338537cad3
- MD5 fa111993b673a33fb80ca53054ce8cb8
- SHA1 9a7d9160f1eb8b282c079956d62ae430d25e998b
- SHA512 5ee0257611c1fbfe100b232d6d5fb19b4c5d7c8388166050adb6ba44776bc241158a516a25b14998dab1c8ee8f4f728bbe6bed4163452bcd2470860d24f171b9
- SSDEEP 786432:3pLRvjXoRldWzctZYcW8xifa7KZqnGCnkJGRKyZi2nRrV6kv5bNO0jrejMBM3:3pIbWXa7KZqnGCnkJGHNO0jrejMM
- TLSH T1E17733F57AC204D2EACA057D84D6A97672E4BBB603B080DB25F54C221D631E6FD7CB21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.