General
- Target userclient.exe
- Size 11.0MB
- Sample260806-va3baafl5v
- SHA256 9ef327aa159f663928bda9bafe5d32732afa51c8fc9deac2cdc0ca80ac929a95
- MD5 748a6d3ab1796cb5d2284448371f50f0
- SHA1 1261df91ada6950049738c6a93720db23d7fce33
- SHA512 14bd3042fc6edfd80a039eda4b9d035d9ed99c0c2481ca05e96de3a89cd39903903f3346eb1ed0cd3635caef20101f5d679e3cca6e0a193039332c980d1c86a1
- SSDEEP 196608:5RBUGiRBGYw8rPnGCxdGjP5fGi2bjKVPy2wESuOVyNt2p9jHVNhpAX:5RBU7nFDnGCnGjQi2bjRoSuOVyN4p9jG
- TLSH T116C633A4A5D104DBF9D3423988F3A0B4F3B4FA122375D0DF466699541F236F2643CBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
userclient.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target userclient.exe
- Size 11.0MB
- SHA256 9ef327aa159f663928bda9bafe5d32732afa51c8fc9deac2cdc0ca80ac929a95
- MD5 748a6d3ab1796cb5d2284448371f50f0
- SHA1 1261df91ada6950049738c6a93720db23d7fce33
- SHA512 14bd3042fc6edfd80a039eda4b9d035d9ed99c0c2481ca05e96de3a89cd39903903f3346eb1ed0cd3635caef20101f5d679e3cca6e0a193039332c980d1c86a1
- SSDEEP 196608:5RBUGiRBGYw8rPnGCxdGjP5fGi2bjKVPy2wESuOVyNt2p9jHVNhpAX:5RBU7nFDnGCnGjQi2bjRoSuOVyN4p9jG
- TLSH T116C633A4A5D104DBF9D3423988F3A0B4F3B4FA122375D0DF466699541F236F2643CBAA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.