General
- Target TgWsProxy_windows.exe
- Size 20.0MB
- Sample260730-2k6vsaydrh
- SHA256 437fcb301098b5cb9cbe2f35493f45f50fefef60ac6e735c1af231a8d232ac81
- MD5 88d3270bedeb1f2d2b3452f26092a6f3
- SHA1 a03493deecf839c12d9b25a5fc072beb4d44de8b
- SHA512 8861f971885966b0bbbf86b3f3e058de7216e8fc0238c8a0a61c4fe8c5cc7e93565aced9d1b0de235432280e4575c4206a0617e6b4e30b8c20ff3c8e70c06d0f
- SSDEEP 393216:iWY9udZVYtqpW8uEBYFxVHFFS04x1+TtIiFRCuARuA3dS9QVdovJdt9XEEWr3XEw:HcMW8dYFrHFFS0I1QtIcCuAHsMdovNdm
- TLSH T14C27339DB3F204FAD8F9417A91EA8652ABD274E643B487C72FE108534E172E5DE34B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TgWsProxy_windows.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
TgWsProxy_windows.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target TgWsProxy_windows.exe
- Size 20.0MB
- SHA256 437fcb301098b5cb9cbe2f35493f45f50fefef60ac6e735c1af231a8d232ac81
- MD5 88d3270bedeb1f2d2b3452f26092a6f3
- SHA1 a03493deecf839c12d9b25a5fc072beb4d44de8b
- SHA512 8861f971885966b0bbbf86b3f3e058de7216e8fc0238c8a0a61c4fe8c5cc7e93565aced9d1b0de235432280e4575c4206a0617e6b4e30b8c20ff3c8e70c06d0f
- SSDEEP 393216:iWY9udZVYtqpW8uEBYFxVHFFS04x1+TtIiFRCuARuA3dS9QVdovJdt9XEEWr3XEw:HcMW8dYFrHFFS0I1QtIcCuAHsMdovNdm
- TLSH T14C27339DB3F204FAD8F9417A91EA8652ABD274E643B487C72FE108534E172E5DE34B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.