General
- Target WelcomeBack.exe
- Size 105.8MB
- Sample260818-amsbmatsct
- SHA256 512d02602b90f003032d9a1b7810248617c2e9dd8705da37f486a00f43ec7e6d
- MD5 9c1d1cb89b1dc79ad7b3f2ae8edf6ea8
- SHA1 c3e687bc889b5f34f9868f72f853094a7482af69
- SHA512 6223d426b85587be7f57cc80b803bb3388a2c4e30490ba585a5f7a655b0988ccd6eff0e8e0d9dab4db99b9a77e1b438229af7de6e55fe4043d094e2a7cd97557
- SSDEEP 3145728:gEIsLyKQiCU1xCBUptIooVl3gyJEXLwIewOE:1I6kU14BOegyg
- TLSH T144383394E5CDE73AD6A74136B88658A520C8B8F61B7708C50769CBD939EE4D0C83CF87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
WelcomeBack.exe
Resource
win11-20260513-en
3 signatures
600 seconds
Malware Config
Targets
-
- Target WelcomeBack.exe
- Size 105.8MB
- SHA256 512d02602b90f003032d9a1b7810248617c2e9dd8705da37f486a00f43ec7e6d
- MD5 9c1d1cb89b1dc79ad7b3f2ae8edf6ea8
- SHA1 c3e687bc889b5f34f9868f72f853094a7482af69
- SHA512 6223d426b85587be7f57cc80b803bb3388a2c4e30490ba585a5f7a655b0988ccd6eff0e8e0d9dab4db99b9a77e1b438229af7de6e55fe4043d094e2a7cd97557
- SSDEEP 3145728:gEIsLyKQiCU1xCBUptIooVl3gyJEXLwIewOE:1I6kU14BOegyg
- TLSH T144383394E5CDE73AD6A74136B88658A520C8B8F61B7708C50769CBD939EE4D0C83CF87
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Loads dropped DLL