General
- Target memreduct1.exe
- Size 373KB
- Sample260806-lt52vasxbz
- SHA256 7d9c3aa2b45ff2b02f665143319dc0f4db8ef5b14209b0fcb909d869faced38b
- MD5 db9070381fe3e7f6d66a574f02f081c1
- SHA1 8b4512225099ae731b3e3627c50e96eaa73d1e5f
- SHA512 618f413f5dfc5ec74805ed0d11bedea867ce688b2cdf63ec4852339deed224dfbe0fbd90ab46814b022bd2e737b8f560da7f6154bf57d614f755f1faebdcaef2
- SSDEEP 6144:gX45rw6xUdTGLG8wGwVrmJuNIqrNe+KHGncZQTsMmIfkKLf6c0v64xSqYPEytC3:gX4JU2G1GwlmJuNIeXoAT1lkPc0pM5c
- TLSH T1D48422253540D4B7D9230B701DF2833AABE8C67553A6521B731D4A5F7F33B82CA09BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
memreduct1.exe
Resource
win10v2004-20260513-en
12 signatures
900 seconds
Behavioral task
behavioral2
Sample
memreduct1.exe
Resource
win11-20260513-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target memreduct1.exe
- Size 373KB
- SHA256 7d9c3aa2b45ff2b02f665143319dc0f4db8ef5b14209b0fcb909d869faced38b
- MD5 db9070381fe3e7f6d66a574f02f081c1
- SHA1 8b4512225099ae731b3e3627c50e96eaa73d1e5f
- SHA512 618f413f5dfc5ec74805ed0d11bedea867ce688b2cdf63ec4852339deed224dfbe0fbd90ab46814b022bd2e737b8f560da7f6154bf57d614f755f1faebdcaef2
- SSDEEP 6144:gX45rw6xUdTGLG8wGwVrmJuNIqrNe+KHGncZQTsMmIfkKLf6c0v64xSqYPEytC3:gX4JU2G1GwlmJuNIeXoAT1lkPc0pM5c
- TLSH T1D48422253540D4B7D9230B701DF2833AABE8C67553A6521B731D4A5F7F33B82CA09BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.