General
- Target many.exe
- Size 17KB
- Sample260812-chdnsattby
- SHA256 92a161be7eaca2662d37950b0de6ce7ae34785a64b6a2ef4ddce6ea5ae790a9b
- MD5 4a4e00c5c11001c66e6b56aa65c1b958
- SHA1 7c1f3d4c5091818899a1fcd230c3d5c9324446ef
- SHA512 8b82e2b77d6c8fdb483c0d5e7ed83767021d5a740a2de40b7126058108bd8cdf4bc1eb4d586ef983f09af74608c427a1c57f2a9fba4d3b40e821ea9464cd3f23
- SSDEEP 384:zQEysWFEf0UCS25Vfg0Ka/fx509JctYcFsBE03K:cTsWh57bnnKStYcFsBE6K
- TLSH T18D823A12A3DC4176E537077E2EF3A3514639E74A682BDA6A744C101FAFA22052BA37D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
many.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
many.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target many.exe
- Size 17KB
- SHA256 92a161be7eaca2662d37950b0de6ce7ae34785a64b6a2ef4ddce6ea5ae790a9b
- MD5 4a4e00c5c11001c66e6b56aa65c1b958
- SHA1 7c1f3d4c5091818899a1fcd230c3d5c9324446ef
- SHA512 8b82e2b77d6c8fdb483c0d5e7ed83767021d5a740a2de40b7126058108bd8cdf4bc1eb4d586ef983f09af74608c427a1c57f2a9fba4d3b40e821ea9464cd3f23
- SSDEEP 384:zQEysWFEf0UCS25Vfg0Ka/fx509JctYcFsBE03K:cTsWh57bnnKStYcFsBE6K
- TLSH T18D823A12A3DC4176E537077E2EF3A3514639E74A682BDA6A744C101FAFA22052BA37D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.