General
- Target rtool.exe
- Size 87.2MB
- Sample260730-trjd3avzby
- SHA256 14dcfff0c5831af9bb97a9213aa8a24f6647b5b3eaf24e19c8011c1830123b79
- MD5 6eb2dded42bcd57e4ed60a2e3654e4e7
- SHA1 b93c5011846d62f164aa5bfdb9f96f170479e871
- SHA512 aac4eeefdaf23e34c12dacbde30ef50f411ae89237b40c5f39c027821ee3b92d207ff0311dbd5e7a731f9b7e0a04b39b4e192bc227b71e60739dde152e9044bf
- SSDEEP 786432:IzRDSWX2LEZ6eoB7UPLar2ZSewUg7Q4PnKBJj6P5LA1a6KqP/ur4xKn6ArKi:ID2LEnkqBJmJ9n6ArK
- TLSH T1FA188D03B3A50095E4BBD23DCA57460BEBB27C55137197DF11A8A6992F33BE02A7E344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
rtool.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
rtool.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target rtool.exe
- Size 87.2MB
- SHA256 14dcfff0c5831af9bb97a9213aa8a24f6647b5b3eaf24e19c8011c1830123b79
- MD5 6eb2dded42bcd57e4ed60a2e3654e4e7
- SHA1 b93c5011846d62f164aa5bfdb9f96f170479e871
- SHA512 aac4eeefdaf23e34c12dacbde30ef50f411ae89237b40c5f39c027821ee3b92d207ff0311dbd5e7a731f9b7e0a04b39b4e192bc227b71e60739dde152e9044bf
- SSDEEP 786432:IzRDSWX2LEZ6eoB7UPLar2ZSewUg7Q4PnKBJj6P5LA1a6KqP/ur4xKn6ArKi:ID2LEnkqBJmJ9n6ArK
- TLSH T1FA188D03B3A50095E4BBD23DCA57460BEBB27C55137197DF11A8A6992F33BE02A7E344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.