General
- Target Workdebug.exe
- Size 8.2MB
- Sample260808-3xc9nseq4x
- SHA256 a60dd3757c29442a5b497558e833d75e113078baa208603df189a544144da666
- MD5 988c90a735429052a6e0b52dffd38b63
- SHA1 38aa8316bcfdba02e509a7d02a0b1f4425656635
- SHA512 95b9b5ad42dce361780c477cf96dd2bfb1cc355ce429c94752ddce3ce909e8ca1a01c7652419dca597b02df9532f79528fa0fb3d259e40387b851ff719226439
- SSDEEP 196608:PhXNTwhLiA1HeT39IigQTauDXURuAEk0ax8Z6E7:JgLr1+TtIiL2uARuAUax66E7
- TLSH T1989633A593B204E9E9B6C23D82A6C12CD66278969726D3CB17D00B533F277F15E39F01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
Workdebug.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Workdebug.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Workdebug.exe
- Size 8.2MB
- SHA256 a60dd3757c29442a5b497558e833d75e113078baa208603df189a544144da666
- MD5 988c90a735429052a6e0b52dffd38b63
- SHA1 38aa8316bcfdba02e509a7d02a0b1f4425656635
- SHA512 95b9b5ad42dce361780c477cf96dd2bfb1cc355ce429c94752ddce3ce909e8ca1a01c7652419dca597b02df9532f79528fa0fb3d259e40387b851ff719226439
- SSDEEP 196608:PhXNTwhLiA1HeT39IigQTauDXURuAEk0ax8Z6E7:JgLr1+TtIiL2uARuAUax66E7
- TLSH T1989633A593B204E9E9B6C23D82A6C12CD66278969726D3CB17D00B533F277F15E39F01
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.