General
- Target immortal cracked by dwmxs.exe
- Size 1.7MB
- Sample260901-2mdl1sck4w
- SHA256 a0c2c99504d9034a1f0e75434c3267cf818b081b34552ece684f6baea6758190
- MD5 eefeafac36a292f3b67ef24953e96d4a
- SHA1 07b29872d1a641d1b1e781993cd7cfd43338adfa
- SHA512 68d8bc133c27ab25f0ff43b644cd7885a6292ba5eab9d5331839241967faeb2e36f1a81db92c50f8c3342cbd9cf64d2186f6fdc4d865fac2d6aad2e6e01b99ac
- SSDEEP 49152:YxUaN013nWmVjspcuouoDMmP963SuDKhzcttYYEg:xGgdgpz47P9mvD6cttYYR
- TLSH T18C85E042F39247E9D5668878D563D733A7323C8D4720C6CFABA49E299FA76C01E36740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
immortal cracked by dwmxs.exe
Resource
win10v2004-20260513-en
19 signatures
900 seconds
Behavioral task
behavioral2
Sample
immortal cracked by dwmxs.exe
Resource
win11ltsc2024-20260709-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target immortal cracked by dwmxs.exe
- Size 1.7MB
- SHA256 a0c2c99504d9034a1f0e75434c3267cf818b081b34552ece684f6baea6758190
- MD5 eefeafac36a292f3b67ef24953e96d4a
- SHA1 07b29872d1a641d1b1e781993cd7cfd43338adfa
- SHA512 68d8bc133c27ab25f0ff43b644cd7885a6292ba5eab9d5331839241967faeb2e36f1a81db92c50f8c3342cbd9cf64d2186f6fdc4d865fac2d6aad2e6e01b99ac
- SSDEEP 49152:YxUaN013nWmVjspcuouoDMmP963SuDKhzcttYYEg:xGgdgpz47P9mvD6cttYYR
- TLSH T18C85E042F39247E9D5668878D563D733A7323C8D4720C6CFABA49E299FA76C01E36740
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Probable phishing domain