General
- Target PWS.exe
- Size 10.1MB
- Sample260730-1lw7as1sct
- SHA256 cdcca0fb862c8829bd7c2b8e2d50c8b3963c7b5b6522cbfa0a10f745defc13b9
- MD5 1fe651f5fef2e74f0ee2d36bbb203a2f
- SHA1 760f128a36afde252430ec07dbfdbe48739b04ee
- SHA512 d0376b299098cb5a5169d91db43de0080b3487dd5589c478214412a5a923a3f392122a7572c5fc0f4b34306bdc9126fca533ef2e2199cae6405d8853ec2d06b5
- SSDEEP 196608:7CnjPaNEtbW897Gjx7eovq5XMP6PzFcoCY+0CMPWhQcHsoRYbRjMFi:CPZ16dq1B7SYPzCQcHsoRYbpii
- TLSH T1ADB6339902D106E3E4BBE23E5A676596C3B374102B23CDEF0B94839D2E572F14D36791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
PWS.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PWS.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target PWS.exe
- Size 10.1MB
- SHA256 cdcca0fb862c8829bd7c2b8e2d50c8b3963c7b5b6522cbfa0a10f745defc13b9
- MD5 1fe651f5fef2e74f0ee2d36bbb203a2f
- SHA1 760f128a36afde252430ec07dbfdbe48739b04ee
- SHA512 d0376b299098cb5a5169d91db43de0080b3487dd5589c478214412a5a923a3f392122a7572c5fc0f4b34306bdc9126fca533ef2e2199cae6405d8853ec2d06b5
- SSDEEP 196608:7CnjPaNEtbW897Gjx7eovq5XMP6PzFcoCY+0CMPWhQcHsoRYbRjMFi:CPZ16dq1B7SYPzCQcHsoRYbpii
- TLSH T1ADB6339902D106E3E4BBE23E5A676596C3B374102B23CDEF0B94839D2E572F14D36791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.