General
- Target فضي.exe
- Size 109.1MB
- Sample260831-2b2jpssxbx
- SHA256 18db7f2f7890839828bc91480005b1db1cd978ff6d99738db7d7a5a214708d51
- MD5 6f32b9fef6178d41a3cf391aadb8c7ec
- SHA1 4ae552cedfdf7d94a87a8967f542b9a3bd390528
- SHA512 342421066830018b5ffc72736c8f217af4dfe125555a7b649d5f306a145170a448b1f701782bc75ed9012411b9d91e580fc24e16aa91abcaac5f9390b2536f38
- SSDEEP 3145728:k9O/mZI5BB7tE0WFCgzv97wx79SiSDwzXEoi:k9smZsjnWFCCCxciUw7e
- TLSH T177483318B29CA59AF184973BC1E38B222BA2B459C735C5CB05B94DC7D7E7081DC7E42B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
فضي.exe
Resource
win10ltsc2021-20260513-en
5 signatures
120 seconds
Malware Config
Targets
-
- Target فضي.exe
- Size 109.1MB
- SHA256 18db7f2f7890839828bc91480005b1db1cd978ff6d99738db7d7a5a214708d51
- MD5 6f32b9fef6178d41a3cf391aadb8c7ec
- SHA1 4ae552cedfdf7d94a87a8967f542b9a3bd390528
- SHA512 342421066830018b5ffc72736c8f217af4dfe125555a7b649d5f306a145170a448b1f701782bc75ed9012411b9d91e580fc24e16aa91abcaac5f9390b2536f38
- SSDEEP 3145728:k9O/mZI5BB7tE0WFCgzv97wx79SiSDwzXEoi:k9smZsjnWFCCCxciUw7e
- TLSH T177483318B29CA59AF184973BC1E38B222BA2B459C735C5CB05B94DC7D7E7081DC7E42B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.