General
- Target Cwelium.exe
- Size 14.8MB
- Sample260802-r7a2hsvgla
- SHA256 ca0fa629eea979ce178ea6a3daa24195d9fa67fd36f0cd2b82e8ac2e6e838a88
- MD5 364ec2d9f92766ab162ce351d2b16b0d
- SHA1 e6bd1e6ce7184aa37564fa49f30d9044bacf9354
- SHA512 6efd82ca2408c1d594afc4802041d56d3a888522657502cb9d17c276476639e9669f80339143488ae4e632bef624619b02c0b19a74fe9e7ad4c7cdde9be24c54
- SSDEEP 393216:Uu5hfBYodO/PhBJS7YD0CrJyoriRauPwosfA2:TZYmqPXsUACVyVRaBon
- TLSH T1E8F63339E16582F8C74790B8D8474121E73BB8ED0301C8D327F7F6A16EA19FA4E76A15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cwelium.exe
Resource
win11-20260513-en
3 signatures
900 seconds
Malware Config
Targets
-
- Target Cwelium.exe
- Size 14.8MB
- SHA256 ca0fa629eea979ce178ea6a3daa24195d9fa67fd36f0cd2b82e8ac2e6e838a88
- MD5 364ec2d9f92766ab162ce351d2b16b0d
- SHA1 e6bd1e6ce7184aa37564fa49f30d9044bacf9354
- SHA512 6efd82ca2408c1d594afc4802041d56d3a888522657502cb9d17c276476639e9669f80339143488ae4e632bef624619b02c0b19a74fe9e7ad4c7cdde9be24c54
- SSDEEP 393216:Uu5hfBYodO/PhBJS7YD0CrJyoriRauPwosfA2:TZYmqPXsUACVyVRaBon
- TLSH T1E8F63339E16582F8C74790B8D8474121E73BB8ED0301C8D327F7F6A16EA19FA4E76A15
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.