General
- Target deobfuscator.exe
- Size 8.8MB
- Sample260905-tk11javwdw
- SHA256 904ac004c8bed90684a6093239a1ad9c0bb048519cbfb01ed98d07ed411afea1
- MD5 df694d08a676ff645bad4ea4b11c5e5f
- SHA1 112e2cb8e376422f403255980294aa6316bac146
- SHA512 bcbaa5ab403fccdb6699f0330d3615d2a2867f1659c9965cc177eafd9f8cda4fc9a1aa198edfd490a2edaf95fa49b6ed519f437be55383ad294cd70e378cc9e3
- SSDEEP 196608:LEhYiLMtbW897GJr1LDsBTG9WdF972WQGa/R6:kYAM1S3sB1jYWQhA
- TLSH T185963354737011DAF8A7A63E4794D08163A2B4228B21CADF57F846CA3F4B6F65D3CB48
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
deobfuscator.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
deobfuscator.exe
Resource
win11ltsc2024-20260709-en
19 signatures
150 seconds
Malware Config
Targets
-
- Target deobfuscator.exe
- Size 8.8MB
- SHA256 904ac004c8bed90684a6093239a1ad9c0bb048519cbfb01ed98d07ed411afea1
- MD5 df694d08a676ff645bad4ea4b11c5e5f
- SHA1 112e2cb8e376422f403255980294aa6316bac146
- SHA512 bcbaa5ab403fccdb6699f0330d3615d2a2867f1659c9965cc177eafd9f8cda4fc9a1aa198edfd490a2edaf95fa49b6ed519f437be55383ad294cd70e378cc9e3
- SSDEEP 196608:LEhYiLMtbW897GJr1LDsBTG9WdF972WQGa/R6:kYAM1S3sB1jYWQhA
- TLSH T185963354737011DAF8A7A63E4794D08163A2B4228B21CADF57F846CA3F4B6F65D3CB48
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)