General
- Target 6ae8e6ee995673727af2f74eda544861f73d0d273468e7d7a1ba76b9b7a66123
- Size 223KB
- Sample260803-pflylaap2t
- SHA256 6ae8e6ee995673727af2f74eda544861f73d0d273468e7d7a1ba76b9b7a66123
- MD5 7721472653cef0245c4e0d32822497f5
- SHA1 c8e6a606912ebbdcd1b8b8db4418587112e77fd0
- SHA512 10af5434b17ed35badc637d7bfa07e18f5245c53a6c15da85002a8a34f08cd4612af7e0385f6d8394fe48c512d384dad0b7b13959ce6f310a35f154d7c5ba9c8
- SSDEEP 6144:dsyY1r/xYCVWUkJmr6NbKUYyLUNDonvAsuRBvvk:dsyYd+A4mZgas8vk
- TLSH T1732423FAEDEF3DC0CE279D7B3358098529748104D774819E4429829B25BF7879AF0C6A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Mem Reduct/memreduct.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Mem Reduct/memreduct.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Mem Reduct/memreduct.exe
- Size 387KB
- SHA256 dd55a81d56e8c32918e5190b2ec2a1f2a7edbbca884627439b4b619fdfb5602d
- MD5 66f5c7ebe24abc9405e688c1597e1be9
- SHA1 39988b6f5b654475f786292e6859b067a388289d
- SHA512 226bb6f5fcd77d487aff2f378d87dfe8574e6331051b5c14fb8c767a6b7fc849e9299ab751e97ccfdbb7e199304b67ffb0b31626ce08c74153108a7471380673
- SSDEEP 6144:+0jxaVsVSJisMi/WHHg+KTzrUd+Mb+kNHvsP:+UaKxji/WvKTzrjM1g
- TLSH T14784F708A991C4A9D1EA8334C56383F2E535FC99DF6389EB6264FD693E33DC06938711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.