General
- Target AeroCordXP061.exe
- Size 14.8MB
- Sample260906-1frdvstame
- SHA256 590017828901fad8acbd6b73318b8df5e34becaa5c0d1885aef3919bcdfef8b8
- MD5 30fff14af4338063fb316f01f081b5b1
- SHA1 a3ed70afceb3785a429650e2b6c5a9fab74f5383
- SHA512 5435d540ab48b1678de908f11c92011f575a123b834138a9e67242cd1c7102debbdcf3b33892ff0814e3f1d2342392a0261e916971a901b2ca02bd065e2468da
- SSDEEP 393216:uwc9moiBUm5CWhf3G0XPlkdf7jxKqWMM4ekxS5abKa7D0z2sS:uwwiB7t9cDdO4ekXKIm
- TLSH T13DF633B5A1DC5AB5F03B2C7058F5C036602E7AB6F6C181AFC750D2E209E5EA1563E81F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Behavioral task
behavioral1
Sample
AeroCordXP061.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
AeroCordXP061.exe
Resource
win11ltsc2024-20260710-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target AeroCordXP061.exe
- Size 14.8MB
- SHA256 590017828901fad8acbd6b73318b8df5e34becaa5c0d1885aef3919bcdfef8b8
- MD5 30fff14af4338063fb316f01f081b5b1
- SHA1 a3ed70afceb3785a429650e2b6c5a9fab74f5383
- SHA512 5435d540ab48b1678de908f11c92011f575a123b834138a9e67242cd1c7102debbdcf3b33892ff0814e3f1d2342392a0261e916971a901b2ca02bd065e2468da
- SSDEEP 393216:uwc9moiBUm5CWhf3G0XPlkdf7jxKqWMM4ekxS5abKa7D0z2sS:uwwiB7t9cDdO4ekXKIm
- TLSH T13DF633B5A1DC5AB5F03B2C7058F5C036602E7AB6F6C181AFC750D2E209E5EA1563E81F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.