General
- Target codeb-remote-service.msi
- Size 23.3MB
- Sample260820-g2t74a1dkf
- SHA256 005a90e92b41b1b8182c11847a6beede19b983f911ca85131c3dda26042b8dfd
- MD5 368f552cacd609f85d1a7eb4a1afe2fe
- SHA1 2ae8f4314cb076ae00f9905051d2326946b1da31
- SHA512 021aa96fe53f8670c753b9e9a841691751993514c68657a113963c7f722440335ccb8ee213d8d700578595a25de1168fef19a48985875615b7c2c6763d9e2501
- SSDEEP 393216:7xfKFOSVacJ5NcWkeFnQUh5EA8tjo5hH/Nu3LJPAZjWDiWaXTDYAEWdwr+8/Z7D:FfSOSIcJP1kKgz9QBFu0WuWCP7rdH8R3
- TLSH T10637331FBE410A66D5130E7489772730EBB53C014730998722A9B12AFEF77D05A7ABD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
codeb-remote-service.msi
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
codeb-remote-service.msi
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target codeb-remote-service.msi
- Size 23.3MB
- SHA256 005a90e92b41b1b8182c11847a6beede19b983f911ca85131c3dda26042b8dfd
- MD5 368f552cacd609f85d1a7eb4a1afe2fe
- SHA1 2ae8f4314cb076ae00f9905051d2326946b1da31
- SHA512 021aa96fe53f8670c753b9e9a841691751993514c68657a113963c7f722440335ccb8ee213d8d700578595a25de1168fef19a48985875615b7c2c6763d9e2501
- SSDEEP 393216:7xfKFOSVacJ5NcWkeFnQUh5EA8tjo5hH/Nu3LJPAZjWDiWaXTDYAEWdwr+8/Z7D:FfSOSIcJP1kKgz9QBFu0WuWCP7rdH8R3
- TLSH T10637331FBE410A66D5130E7489772730EBB53C014730998722A9B12AFEF77D05A7ABD2
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Loads dropped DLL
-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Drops file in System32 directory