General
- Target CoteabMacro.exe
- Size 79.3MB
- Sample260823-xtklpazakh
- SHA256 4eaba8437738a869701911dd65e684666ecf246ce592d32e7cb47480bc976c25
- MD5 34784aa8aab708ae8060a8e2769377fd
- SHA1 d11261eee0ee17ad1f627e88b15d66e288ee2e7b
- SHA512 556719e71d851c70e3ae2805acf26e8bdd24c0241c443dce452d8b33dc01db592e845139cf70ac11f542b07f037919f44a1d6ddd13c2c029531d8c16e437837f
- SSDEEP 1572864:YYxhQL0OWtLjZwV1JMjZAxH0R51gqTcaNH21A/IlnGCnkqaV+BbnYJmgZtN9o+8a:YYxGL0O8LFwbRH0R5L7lxI9GCnkvV+Bc
- TLSH T13F0833CE7F8198C6F45A03765996C938AA19FE58472641AA47EC3C333C3B3D4C9B5A31
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
CoteabMacro.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
CoteabMacro.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Behavioral task
behavioral3
Sample
main.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
main.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target CoteabMacro.exe
- Size 79.3MB
- SHA256 4eaba8437738a869701911dd65e684666ecf246ce592d32e7cb47480bc976c25
- MD5 34784aa8aab708ae8060a8e2769377fd
- SHA1 d11261eee0ee17ad1f627e88b15d66e288ee2e7b
- SHA512 556719e71d851c70e3ae2805acf26e8bdd24c0241c443dce452d8b33dc01db592e845139cf70ac11f542b07f037919f44a1d6ddd13c2c029531d8c16e437837f
- SSDEEP 1572864:YYxhQL0OWtLjZwV1JMjZAxH0R51gqTcaNH21A/IlnGCnkqaV+BbnYJmgZtN9o+8a:YYxGL0O8LFwbRH0R5L7lxI9GCnkvV+Bc
- TLSH T13F0833CE7F8198C6F45A03765996C938AA19FE58472641AA47EC3C333C3B3D4C9B5A31
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target main.pyc
- Size 90KB
- SHA256 58bd16072ff482e53568ed5ff395d58c2e28f74770f78ae19a8a51ed522c61f3
- MD5 46a647c2dc0c54b807e3c1d9fe9a89e0
- SHA1 b3846a76439487f0b16abfc7e344e2360fbd17e1
- SHA512 ed0fdc49ecb5925644a2bdbbe817cf559ebadd331eea6d946a06cd47c798af6ece4099c5f6dd8553a0ed60c2eb2390d8f4a902ced7abbed7844a46242a6def0c
- SSDEEP 1536:HC7hLSkMdxsOcE9rzxd1OMeBjAS3PXClWQAT4gE3qb:itWddK+VjZflWQAT4gE3qb
- TLSH T1C593D78BB531991BEF60B07850E65680F37C6D83B218C713325E41B62FDA76ACD9271D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10