General
- Target duskclicker.exe
- Size 3.5MB
- Sample260909-x7fjwsstft
- SHA256 65d3f0d5d7a3fcb357ddbcf8a02bec7defaf013703ca283c030048e304d45321
- MD5 fe80aa98381fee41e00ff555e7f7722e
- SHA1 b0dc5c527b3e1463f976af43d05d4e22f759e4d6
- SHA512 06c6b9338040bba1ee9b8a007f6ad8119d94bbc8dd00cae17440409c7573528d9f3289f3f8f94d4f5a43ff750e4dc9ba7f2682d2d38dfaa81d0d9526120bb3fb
- SSDEEP 49152:J+qNSNPw+W7SC382olUw/DIDiGFbwr8GQMaUw9uRzCm0FfeCCxNJ/MzV47Zb/9BE:JjNdJwlUw/civJQMtqyt0FmvH/eV4d
- TLSH T16F06DF523392EA01C4642EFB1D4C96D49371BDC29E46E3533A817BEF5DFD7828C19A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
duskclicker.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
duskclicker.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target duskclicker.exe
- Size 3.5MB
- SHA256 65d3f0d5d7a3fcb357ddbcf8a02bec7defaf013703ca283c030048e304d45321
- MD5 fe80aa98381fee41e00ff555e7f7722e
- SHA1 b0dc5c527b3e1463f976af43d05d4e22f759e4d6
- SHA512 06c6b9338040bba1ee9b8a007f6ad8119d94bbc8dd00cae17440409c7573528d9f3289f3f8f94d4f5a43ff750e4dc9ba7f2682d2d38dfaa81d0d9526120bb3fb
- SSDEEP 49152:J+qNSNPw+W7SC382olUw/DIDiGFbwr8GQMaUw9uRzCm0FfeCCxNJ/MzV47Zb/9BE:JjNdJwlUw/civJQMtqyt0FmvH/eV4d
- TLSH T16F06DF523392EA01C4642EFB1D4C96D49371BDC29E46E3533A817BEF5DFD7828C19A82
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)