General
- Target roxentec-h.dll
- Size 392KB
- Sample260903-183mlaxbmg
- SHA256 3479a440d2696a176ff2cf3afeca5ada17381776c0781d8f74c8c5c508c720ff
- MD5 024e9be87aef2f09c2fcee3c8f30b2af
- SHA1 841d95731ec530a4eaa0a9f539180d09b95b9741
- SHA512 4851ae5f90dddf92c4c7fc842379d0c504da84578aa64ab4e6474dc977c8f9df779b16519c1e514fda0671e86e4d2685f8336f8396801da51f7eac81b57a6ea2
- SSDEEP 6144:u5AR8L/hTa320SABAdxj+gYSG28Zn74Qpo:ZP0y2G28Znk
- TLSH T1B6848D1AE9A604B9D1A3D578C9735502EA327C4E07609ADB23E40A991F3BFE05B3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
roxentec-h.dll
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target roxentec-h.dll
- Size 392KB
- SHA256 3479a440d2696a176ff2cf3afeca5ada17381776c0781d8f74c8c5c508c720ff
- MD5 024e9be87aef2f09c2fcee3c8f30b2af
- SHA1 841d95731ec530a4eaa0a9f539180d09b95b9741
- SHA512 4851ae5f90dddf92c4c7fc842379d0c504da84578aa64ab4e6474dc977c8f9df779b16519c1e514fda0671e86e4d2685f8336f8396801da51f7eac81b57a6ea2
- SSDEEP 6144:u5AR8L/hTa320SABAdxj+gYSG28Zn74Qpo:ZP0y2G28Znk
- TLSH T1B6848D1AE9A604B9D1A3D578C9735502EA327C4E07609ADB23E40A991F3BFE05B3F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.