General
- Target exework.exe
- Size 6.9MB
- Sample260907-h2w75afd97
- SHA256 58965694d7588825e1b62d0d6d6650e3db7d7153f46779ba11f20c01464aefcc
- MD5 0cdb74a3c6abb2264395b40834afbf62
- SHA1 e9fffee7015dd17d89d7bc6d697aea9ed2ed44df
- SHA512 3d8c26d1945fa79a4f963fa93355ea2f3a64de6ea762fabf28d575acf45ac8009ddf539ad967d24f6830924f95ff78a05c0ecf0d7d6782ed7697f191eabdfc18
- SSDEEP 49152:EGFgdQTtiKxTO4TVeRtFs754epsos3TkJkcHUsFwYqCvmKWq9+Na6KCK5KwDlCqH:EwM+uMeOV2TqqYZOKVBEEt
- TLSH T106765907EC5518E9C0AEC67589679552BF71BC884B3123DB2B90F6283F72BD0ADB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
exework.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target exework.exe
- Size 6.9MB
- SHA256 58965694d7588825e1b62d0d6d6650e3db7d7153f46779ba11f20c01464aefcc
- MD5 0cdb74a3c6abb2264395b40834afbf62
- SHA1 e9fffee7015dd17d89d7bc6d697aea9ed2ed44df
- SHA512 3d8c26d1945fa79a4f963fa93355ea2f3a64de6ea762fabf28d575acf45ac8009ddf539ad967d24f6830924f95ff78a05c0ecf0d7d6782ed7697f191eabdfc18
- SSDEEP 49152:EGFgdQTtiKxTO4TVeRtFs754epsos3TkJkcHUsFwYqCvmKWq9+Na6KCK5KwDlCqH:EwM+uMeOV2TqqYZOKVBEEt
- TLSH T106765907EC5518E9C0AEC67589679552BF71BC884B3123DB2B90F6283F72BD0ADB9344
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.