General
- Target CoteabMacro.exe
- Size 79.3MB
- Sample260808-wxswsssena
- SHA256 4eaba8437738a869701911dd65e684666ecf246ce592d32e7cb47480bc976c25
- MD5 34784aa8aab708ae8060a8e2769377fd
- SHA1 d11261eee0ee17ad1f627e88b15d66e288ee2e7b
- SHA512 556719e71d851c70e3ae2805acf26e8bdd24c0241c443dce452d8b33dc01db592e845139cf70ac11f542b07f037919f44a1d6ddd13c2c029531d8c16e437837f
- SSDEEP 1572864:YYxhQL0OWtLjZwV1JMjZAxH0R51gqTcaNH21A/IlnGCnkqaV+BbnYJmgZtN9o+8a:YYxGL0O8LFwbRH0R5L7lxI9GCnkvV+Bc
- TLSH T13F0833CE7F8198C6F45A03765996C938AA19FE58472641AA47EC3C333C3B3D4C9B5A31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
CoteabMacro.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
CoteabMacro.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target CoteabMacro.exe
- Size 79.3MB
- SHA256 4eaba8437738a869701911dd65e684666ecf246ce592d32e7cb47480bc976c25
- MD5 34784aa8aab708ae8060a8e2769377fd
- SHA1 d11261eee0ee17ad1f627e88b15d66e288ee2e7b
- SHA512 556719e71d851c70e3ae2805acf26e8bdd24c0241c443dce452d8b33dc01db592e845139cf70ac11f542b07f037919f44a1d6ddd13c2c029531d8c16e437837f
- SSDEEP 1572864:YYxhQL0OWtLjZwV1JMjZAxH0R51gqTcaNH21A/IlnGCnkqaV+BbnYJmgZtN9o+8a:YYxGL0O8LFwbRH0R5L7lxI9GCnkvV+Bc
- TLSH T13F0833CE7F8198C6F45A03765996C938AA19FE58472641AA47EC3C333C3B3D4C9B5A31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.