General
- Target CSX.exe
- Size 4.0MB
- Sample260903-2yy24axerf
- SHA256 2f60bc88bba0031cec27bf99eebeb943832976edb4c6445fd12a086e3cf9db80
- MD5 2a8a8306e87300c964c8fafc46c1a97d
- SHA1 032b95e02cacb5dfe7e0a0a598ec94d5c6910f62
- SHA512 a250c718f96f4d4e7846c3e55d43442e247e7082784fc1e5064cfcb24f1fb37445d8908e554bda5ca32edd6cab1134bb22393bffd707f031fc857d7e4bad9ee4
- SSDEEP 98304:LS9VKCJAExFEmk6bZeNwIrqJtLFNv5sfjap:LcTFLkEZeNwIrutr5Aup
- TLSH T1F81601213F759D38CD4671B60D588BE7661AAC313F6F83D23A0C6B9258224FF61F4962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CSX.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
CSX.exe
Resource
win11ltsc2024-20260709-en
16 signatures
150 seconds
Malware Config
Targets
-
- Target CSX.exe
- Size 4.0MB
- SHA256 2f60bc88bba0031cec27bf99eebeb943832976edb4c6445fd12a086e3cf9db80
- MD5 2a8a8306e87300c964c8fafc46c1a97d
- SHA1 032b95e02cacb5dfe7e0a0a598ec94d5c6910f62
- SHA512 a250c718f96f4d4e7846c3e55d43442e247e7082784fc1e5064cfcb24f1fb37445d8908e554bda5ca32edd6cab1134bb22393bffd707f031fc857d7e4bad9ee4
- SSDEEP 98304:LS9VKCJAExFEmk6bZeNwIrqJtLFNv5sfjap:LcTFLkEZeNwIrutr5Aup
- TLSH T1F81601213F759D38CD4671B60D588BE7661AAC313F6F83D23A0C6B9258224FF61F4962
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Deletes itself
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.