General
- Target svc.exe
- Size 70.1MB
- Sample260819-twjkmayalg
- SHA256 799a026e6fe1823a5875cff1f57d23b6309e58e86417e82db6bbea53d46e564f
- MD5 d65ca6aad2e22918c4ca7595f9c1fbfc
- SHA1 10044a1f7aff9af82c6bb05c154c1bfe77e4925b
- SHA512 8b5aaa1d40d89224aadd9f13b79ccc85d36e7428a9e74977d82c81b652da88fab35a760b347c1e6298d985913f7c4c57b425ed911fa699e69661f36e6de121ae
- SSDEEP 786432:xG0MtsFd+U4DVOK33ZiSOH0q4DlpFcz7yV:xGeFdX0Zi0ySV
- TLSH T13FF7BF15E3D84B16E63FC2BDC2638512E6B1B8531351D7CF0498DE992F63BC1AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
svc.exe
Resource
win11ltsc2024-20260710-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target svc.exe
- Size 70.1MB
- SHA256 799a026e6fe1823a5875cff1f57d23b6309e58e86417e82db6bbea53d46e564f
- MD5 d65ca6aad2e22918c4ca7595f9c1fbfc
- SHA1 10044a1f7aff9af82c6bb05c154c1bfe77e4925b
- SHA512 8b5aaa1d40d89224aadd9f13b79ccc85d36e7428a9e74977d82c81b652da88fab35a760b347c1e6298d985913f7c4c57b425ed911fa699e69661f36e6de121ae
- SSDEEP 786432:xG0MtsFd+U4DVOK33ZiSOH0q4DlpFcz7yV:xGeFdX0Zi0ySV
- TLSH T13FF7BF15E3D84B16E63FC2BDC2638512E6B1B8531351D7CF0498DE992F63BC1AB36262
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)