General
- Target 2026-09-04_4601ec6a0eefe5bcd7f258d8238edd6c_mespinoza
- Size 2.7MB
- Sample260905-pllvsack4y
- SHA256 7bd7370f90a18eb0372886e1d7d0b1922b46f7e20a6dd9eb6e8b35de269c9e8a
- MD5 4601ec6a0eefe5bcd7f258d8238edd6c
- SHA1 afd7019a6f5ff5103c572088187e978c232ed0b5
- SHA512 7c30d86078ca9fb79d5772f56712fe93eff3262705e019806d83ee73bb83334a8229b9eb6b9895d11350be8a2e69131f7e820e4e73ee1c1b3f5817974fcf1b86
- SSDEEP 49152:ALSuF8IZ9lNQt1QajqOoQ+pTFNgeihK9+TmLADw:gZDgYgea85A
- TLSH T1ACD5AD9AFA5741DCC059C4BC87079B5AA630389A1F14E6EF01D856B82F7BAF51F38309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-04_4601ec6a0eefe5bcd7f258d8238edd6c_mespinoza.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-04_4601ec6a0eefe5bcd7f258d8238edd6c_mespinoza.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-04_4601ec6a0eefe5bcd7f258d8238edd6c_mespinoza
- Size 2.7MB
- SHA256 7bd7370f90a18eb0372886e1d7d0b1922b46f7e20a6dd9eb6e8b35de269c9e8a
- MD5 4601ec6a0eefe5bcd7f258d8238edd6c
- SHA1 afd7019a6f5ff5103c572088187e978c232ed0b5
- SHA512 7c30d86078ca9fb79d5772f56712fe93eff3262705e019806d83ee73bb83334a8229b9eb6b9895d11350be8a2e69131f7e820e4e73ee1c1b3f5817974fcf1b86
- SSDEEP 49152:ALSuF8IZ9lNQt1QajqOoQ+pTFNgeihK9+TmLADw:gZDgYgea85A
- TLSH T1ACD5AD9AFA5741DCC059C4BC87079B5AA630389A1F14E6EF01D856B82F7BAF51F38309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.