General
- Target Cwelium.exe
- Size 13.6MB
- Sample260826-sn4p6aea28
- SHA256 44647152284cb7caed6cfe797875f31f1c4cb1f170d4ee58e8e1510def68697a
- MD5 fa51e44a53a7ac477d1e9ecffad76b38
- SHA1 e0427f6387014079795e5f137274a00a31ef2be1
- SHA512 3c99eca52f73edea0eb4ffa4399d652301488f500766230449aa8a2f7ab90060f019183bb28f1c52a4e7a23e38ac3b5d6e7ce0c544bd6da99d4ea796041f2430
- SSDEEP 196608:fzz7GaaF37LZ6RAxvLk1dVid32XHVOhqEEmdYRBIPqn7Fbx9Lvd3ouT8n3YCS:rlaFrL0gvLk7Q3iydYRBhFbxH4W8
- TLSH T1CCE63391FC53F7D7F007F7B45249BCF056E96CAE8911E196E2D1D2722381F8B68AA060
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Cwelium.exe
Resource
win11ltsc2024-20260710-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target Cwelium.exe
- Size 13.6MB
- SHA256 44647152284cb7caed6cfe797875f31f1c4cb1f170d4ee58e8e1510def68697a
- MD5 fa51e44a53a7ac477d1e9ecffad76b38
- SHA1 e0427f6387014079795e5f137274a00a31ef2be1
- SHA512 3c99eca52f73edea0eb4ffa4399d652301488f500766230449aa8a2f7ab90060f019183bb28f1c52a4e7a23e38ac3b5d6e7ce0c544bd6da99d4ea796041f2430
- SSDEEP 196608:fzz7GaaF37LZ6RAxvLk1dVid32XHVOhqEEmdYRBIPqn7Fbx9Lvd3ouT8n3YCS:rlaFrL0gvLk7Q3iydYRBhFbxH4W8
- TLSH T1CCE63391FC53F7D7F007F7B45249BCF056E96CAE8911E196E2D1D2722381F8B68AA060
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.