General
- Target pluto.exe
- Size 15.7MB
- Sample260907-j1t7taff89
- SHA256 7083b9c94e7c32f8b35bbaccbea09d4e1edf5900d38e4e16eda066d7b6983e06
- MD5 31ab6b9ae18801264a20cdb764cc8a5c
- SHA1 aba09e5640c298b216e5c93677462ffda8dd9248
- SHA512 48d470f2fed1dd5994cd5ba4b50330b88ab925322edb3d527a1be9610d420ca3c1333928687e24223afdc70098260e142ea036e459787a57014f1afb54c6662a
- SSDEEP 196608:dDcZTbIo45LPz+9o7BEj2mNvVrxrZn+K1A+:G45f+iBETNddB+K1A+
- TLSH T19EF639217A5A996DC19BC474838B4AB2497170CB0B35B9FF44D492382F6EBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
pluto.exe
Resource
win11-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target pluto.exe
- Size 15.7MB
- SHA256 7083b9c94e7c32f8b35bbaccbea09d4e1edf5900d38e4e16eda066d7b6983e06
- MD5 31ab6b9ae18801264a20cdb764cc8a5c
- SHA1 aba09e5640c298b216e5c93677462ffda8dd9248
- SHA512 48d470f2fed1dd5994cd5ba4b50330b88ab925322edb3d527a1be9610d420ca3c1333928687e24223afdc70098260e142ea036e459787a57014f1afb54c6662a
- SSDEEP 196608:dDcZTbIo45LPz+9o7BEj2mNvVrxrZn+K1A+:G45f+iBETNddB+K1A+
- TLSH T19EF639217A5A996DC19BC474838B4AB2497170CB0B35B9FF44D492382F6EBF42F38359
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.