General
- Target Loader.exe
- Size 12.4MB
- Sample260831-klj9qsz1ev
- SHA256 660cba4f6fc0104d47063359fb33a7aa6adc6043a64417f155bdaf63fe8653cc
- MD5 3967f5fc06dbd91b8ef6579da55cf530
- SHA1 666b27a382dd169d59d00015cf276dac2a33e473
- SHA512 ab20a80a27aa337d67f252c1c85d92d38eb91aae64e59af5a6575977c7aa0947fdb75f9f3db30b7cfea098d1b30ed863565e749d5f6e4244cc109fd27cbc9819
- SSDEEP 196608:ccs96uBoB8h9E+GsZkvrNZUJfIcmYLfEQ+9Ps/5M8wJNgy7:Ns96uS8fE+TkvrNZUNIcmYLEX9w+3
- TLSH T198D623D29EFB42A4C4432CB07EC223B667A6719E819D0E1F36855C1A3D46EBEC84F175
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 12.4MB
- SHA256 660cba4f6fc0104d47063359fb33a7aa6adc6043a64417f155bdaf63fe8653cc
- MD5 3967f5fc06dbd91b8ef6579da55cf530
- SHA1 666b27a382dd169d59d00015cf276dac2a33e473
- SHA512 ab20a80a27aa337d67f252c1c85d92d38eb91aae64e59af5a6575977c7aa0947fdb75f9f3db30b7cfea098d1b30ed863565e749d5f6e4244cc109fd27cbc9819
- SSDEEP 196608:ccs96uBoB8h9E+GsZkvrNZUJfIcmYLfEQ+9Ps/5M8wJNgy7:Ns96uS8fE+TkvrNZUNIcmYLEX9w+3
- TLSH T198D623D29EFB42A4C4432CB07EC223B667A6719E819D0E1F36855C1A3D46EBEC84F175
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger