General
- Target UR3.scr
- Size 10.1MB
- Sample260730-1b52fszzet
- SHA256 1b7eb33cd5c4015518ed66515f0941900015984cf8bbc060c6c85619c1dbc193
- MD5 c6dcd03eb19fccefe20bdb436da6193c
- SHA1 62b3bb7fd5e01140fd64e2a5c4e6db80bd89440c
- SHA512 c92fabc2775dcf121cfb6795a40d56ba7e412913edec6e08b3c7564b1f0f5bccab051163c70e6fbba095d9d6502477c5bc107eb20bb94fbd9a6c9736c6ebcdaf
- SSDEEP 196608:wnAGtbW897Gjx7eovq5XMP6PzFcoCY+0CMPWhQcHsoRYbRjMFi:U16dq1B7SYPzCQcHsoRYbpii
- TLSH T18CB6339E42D105E6E4AFE33E5A66A592C3B374001B23CDAF0BA4425D3F5B2F18D357A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
UR3.scr
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
UR3.scr
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target UR3.scr
- Size 10.1MB
- SHA256 1b7eb33cd5c4015518ed66515f0941900015984cf8bbc060c6c85619c1dbc193
- MD5 c6dcd03eb19fccefe20bdb436da6193c
- SHA1 62b3bb7fd5e01140fd64e2a5c4e6db80bd89440c
- SHA512 c92fabc2775dcf121cfb6795a40d56ba7e412913edec6e08b3c7564b1f0f5bccab051163c70e6fbba095d9d6502477c5bc107eb20bb94fbd9a6c9736c6ebcdaf
- SSDEEP 196608:wnAGtbW897Gjx7eovq5XMP6PzFcoCY+0CMPWhQcHsoRYbRjMFi:U16dq1B7SYPzCQcHsoRYbpii
- TLSH T18CB6339E42D105E6E4AFE33E5A66A592C3B374001B23CDAF0BA4425D3F5B2F18D357A1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.