General
- Target KlesLwR.exe
- Size 226.5MB
- Sample260814-2akvkashja
- SHA256 4195d8069e1ab69c781f9023606c5fdbff67cedd9c45bcfe862b6b680bc9d4a0
- MD5 27ce19aaa3f7f951f9612256e2fde4b9
- SHA1 422aa4ef0b0ee514f87e87b51d6c14f80008dedd
- SHA512 848f0673506dbdc9e625f3c3465e4a92daee7b5d12e7d3b45a8d8be61d9c469f8a136358ca495df353d3c6afa865b289a55b739ed2e2a6fd503905cd4e562d6e
- SSDEEP 1572864:BY62gR1giq+lNhiJhA838JsHWEd2CvG8fOkkboPVDMGRA+px1:NjqQN0S7JsLd2eOk0oP6Gh
- TLSH T1ACB89D1163E81A16D27F8679D6738261D6B1FC526711C2CF0488BA4E2F737C26A363B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
KlesLwR.exe
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target KlesLwR.exe
- Size 226.5MB
- SHA256 4195d8069e1ab69c781f9023606c5fdbff67cedd9c45bcfe862b6b680bc9d4a0
- MD5 27ce19aaa3f7f951f9612256e2fde4b9
- SHA1 422aa4ef0b0ee514f87e87b51d6c14f80008dedd
- SHA512 848f0673506dbdc9e625f3c3465e4a92daee7b5d12e7d3b45a8d8be61d9c469f8a136358ca495df353d3c6afa865b289a55b739ed2e2a6fd503905cd4e562d6e
- SSDEEP 1572864:BY62gR1giq+lNhiJhA838JsHWEd2CvG8fOkkboPVDMGRA+px1:NjqQN0S7JsLd2eOk0oP6Gh
- TLSH T1ACB89D1163E81A16D27F8679D6738261D6B1FC526711C2CF0488BA4E2F737C26A363B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.