General
- Target MBVL.exe
- Size 11.3MB
- Sample260803-k8ac2sshlh
- SHA256 a58b5175ad22b37a2c1c64782a075786beabaa8665702b200521aa713d6e5334
- MD5 abdd0e143aafa55f4f117252349a4c3f
- SHA1 9b270e94a795c68a790c42eda1331f1c739508a7
- SHA512 46e88b38cb286d7464718be54e14a6c568e3cd7813e3025a00bda03a69cf3153c442a1d80de9de831d7e68ddd9e6cc6fa72dfb50771459d1fa4881d97e0210be
- SSDEEP 196608:4sogGRZgdqWuXJWIj8KkUx2R4NzhA1HeT39IigQ6xeE9TFa0Z8DOjCdylL9Qw/3a:ERZg49JWQsUcR4NzK1+TtIiLvY9Z8D8o
- TLSH T1B7C6331C21E109E9E5AB9479C2A6C961BB726C924760C78F67FC0B741F073F28E76352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
MBVL.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
MBVL.exe
Resource
win10ltsc2021-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target MBVL.exe
- Size 11.3MB
- SHA256 a58b5175ad22b37a2c1c64782a075786beabaa8665702b200521aa713d6e5334
- MD5 abdd0e143aafa55f4f117252349a4c3f
- SHA1 9b270e94a795c68a790c42eda1331f1c739508a7
- SHA512 46e88b38cb286d7464718be54e14a6c568e3cd7813e3025a00bda03a69cf3153c442a1d80de9de831d7e68ddd9e6cc6fa72dfb50771459d1fa4881d97e0210be
- SSDEEP 196608:4sogGRZgdqWuXJWIj8KkUx2R4NzhA1HeT39IigQ6xeE9TFa0Z8DOjCdylL9Qw/3a:ERZg49JWQsUcR4NzK1+TtIiLvY9Z8D8o
- TLSH T1B7C6331C21E109E9E5AB9479C2A6C961BB726C924760C78F67FC0B741F073F28E76352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.