General
- Target KDMapper.exe
- Size 150KB
- Sample260809-ttxdpsvsa1
- SHA256 eb4e4fac05c3debb4945d0e291da99362f49832c69c24458e96776b7ae711775
- MD5 1c6cb4a8f2a46c28dda107b4082df269
- SHA1 ffc0e17a50ff7c18560f19d77d190eecfd40f591
- SHA512 e8c1e3cde49a16ed7c932c0cb54f1065c599623edda478ecda382e3b4d46ac2e90837762238f46f539d2b8dfa62ad5c4c3f1901d983416f8835ef6845f5d28d4
- SSDEEP 3072:UdbUjZEbbIDfVEz9kwUmJTQSaMm5/6o5WM9NIw:gUZEbbqfIScWlT8
- TLSH T1C4E31A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KDMapper.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
KDMapper.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target KDMapper.exe
- Size 150KB
- SHA256 eb4e4fac05c3debb4945d0e291da99362f49832c69c24458e96776b7ae711775
- MD5 1c6cb4a8f2a46c28dda107b4082df269
- SHA1 ffc0e17a50ff7c18560f19d77d190eecfd40f591
- SHA512 e8c1e3cde49a16ed7c932c0cb54f1065c599623edda478ecda382e3b4d46ac2e90837762238f46f539d2b8dfa62ad5c4c3f1901d983416f8835ef6845f5d28d4
- SSDEEP 3072:UdbUjZEbbIDfVEz9kwUmJTQSaMm5/6o5WM9NIw:gUZEbbqfIScWlT8
- TLSH T1C4E31A1797A5106EE1B7D6B9CAB24911EB727C550B74D2CF135048BA0F32BD0BA3EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.