General
- Target 2026-09-06_42f7f5b53489a3390f4bce418e3e91ab_mespinoza
- Size 2.7MB
- Sample260907-e1bm9aydje
- SHA256 ae010b963ccf92b1c513c0432d06eb55fc5ca794410ecedb55b61da5f6f57a55
- MD5 42f7f5b53489a3390f4bce418e3e91ab
- SHA1 4cc81e11cbc2048c143a02530edf52fcc49968fc
- SHA512 0e266a2d35b3504eb7e344ab4b8aaafb98724ffe872c9473ef07eb5ecc431dea029579c1f512f97a4dbcc4016d06026b92e4d6cb02af61db3522e2f22724015a
- SSDEEP 49152:ALSuF8IZ9lNQt1QajqOoQ+pTFNgeihK9XTmLADw:gZDgYgea8oA
- TLSH T1D2D5AD9AFA5741DCC059C4BC87079B5AA630389A1F14E6EF01D856B82F7BAF51F38309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2026-09-06_42f7f5b53489a3390f4bce418e3e91ab_mespinoza.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-09-06_42f7f5b53489a3390f4bce418e3e91ab_mespinoza.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-09-06_42f7f5b53489a3390f4bce418e3e91ab_mespinoza
- Size 2.7MB
- SHA256 ae010b963ccf92b1c513c0432d06eb55fc5ca794410ecedb55b61da5f6f57a55
- MD5 42f7f5b53489a3390f4bce418e3e91ab
- SHA1 4cc81e11cbc2048c143a02530edf52fcc49968fc
- SHA512 0e266a2d35b3504eb7e344ab4b8aaafb98724ffe872c9473ef07eb5ecc431dea029579c1f512f97a4dbcc4016d06026b92e4d6cb02af61db3522e2f22724015a
- SSDEEP 49152:ALSuF8IZ9lNQt1QajqOoQ+pTFNgeihK9XTmLADw:gZDgYgea8oA
- TLSH T1D2D5AD9AFA5741DCC059C4BC87079B5AA630389A1F14E6EF01D856B82F7BAF51F38309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.