General
- Target Payment_Notification_20260804724.exe
- Size 3.4MB
- Sample260804-gv5egseb56
- SHA256 609c95b0b3d7ced9d69347b97fd860cc9ba4a05ac8137729582949b9cc50b0b7
- MD5 ecd782e2dd348280361f32eb861e0e64
- SHA1 3f24e2a43c6f24955d9098a42935fab027d49c5a
- SHA512 99d29fdc29074fb430de8389759f3285fe9282dc1c6286911e5b60e0b3fb347040b8da723944379bb69eb7f126074d5ec3871d835c6e3bdd60d6c84c08e196c0
- SSDEEP 49152:Q8rHsrvfPl2oiPJtlDpsbqyOzwCBemWY0HvmGCp6DXBTl:Q8ArHN8HwPY0HvmGZXBTl
- TLSH T190F58D07BCA408E9C0AE9371C9B655963B75BC480B3267EB2B50B6783FB2BD05D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Payment_Notification_20260804724.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Payment_Notification_20260804724.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Payment_Notification_20260804724.exe
- Size 3.4MB
- SHA256 609c95b0b3d7ced9d69347b97fd860cc9ba4a05ac8137729582949b9cc50b0b7
- MD5 ecd782e2dd348280361f32eb861e0e64
- SHA1 3f24e2a43c6f24955d9098a42935fab027d49c5a
- SHA512 99d29fdc29074fb430de8389759f3285fe9282dc1c6286911e5b60e0b3fb347040b8da723944379bb69eb7f126074d5ec3871d835c6e3bdd60d6c84c08e196c0
- SSDEEP 49152:Q8rHsrvfPl2oiPJtlDpsbqyOzwCBemWY0HvmGCp6DXBTl:Q8ArHN8HwPY0HvmGZXBTl
- TLSH T190F58D07BCA408E9C0AE9371C9B655963B75BC480B3267EB2B50B6783FB2BD05D79704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Windows security bypass
-
Downloads MZ/PE file
-
Executes dropped EXE
-
Windows security modification
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.