General
- Target ReideN.exe
- Size 19.9MB
- Sample260803-m1eznsgr91
- SHA256 c5141bba192fd8e2d7415fc5555a3df40d4e78aaf1532a997aea78f3b76265cc
- MD5 006814c67f6415012e1c54f14da990f3
- SHA1 21b398b6ef1be900d80edf6b68b043960aac5dbf
- SHA512 194a4afaba055b09ee4a79cd73133bf7c275a65edcb0bfa3f5b338b02e95d81dc2e45a04ad24b63f96b575d822a26a74150d09ebbf5ef0aa6b63e6d5900f18b6
- SSDEEP 196608:lcvH/pywMSuLC1guC2AXhtVKza9qX8bAoR+DIBXss7hrGfEnYXXoPCk:QywMSuLC1guC2Ax0vojBDKEnYXXoqk
- TLSH T1FF270761BA5B996CD09BC4B483478A720A7030DB0B35B9FF549492392F6DBF46F3821D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ReideN.exe
Resource
win10v2004-20260513-en
24 signatures
900 seconds
Behavioral task
behavioral2
Sample
ReideN.exe
Resource
win11ltsc2024-20260709-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target ReideN.exe
- Size 19.9MB
- SHA256 c5141bba192fd8e2d7415fc5555a3df40d4e78aaf1532a997aea78f3b76265cc
- MD5 006814c67f6415012e1c54f14da990f3
- SHA1 21b398b6ef1be900d80edf6b68b043960aac5dbf
- SHA512 194a4afaba055b09ee4a79cd73133bf7c275a65edcb0bfa3f5b338b02e95d81dc2e45a04ad24b63f96b575d822a26a74150d09ebbf5ef0aa6b63e6d5900f18b6
- SSDEEP 196608:lcvH/pywMSuLC1guC2AXhtVKza9qX8bAoR+DIBXss7hrGfEnYXXoPCk:QywMSuLC1guC2Ax0vojBDKEnYXXoqk
- TLSH T1FF270761BA5B996CD09BC4B483478A720A7030DB0B35B9FF549492392F6DBF46F3821D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.