General
- Target OverWack.exe
- Size 2.7MB
- Sample260910-1rcd3shl3z
- SHA256 fcc0171f54cb2da2e1a3a18a051e1ff522c2618ef275b0eb752feca3c418d6c2
- MD5 3dbde75138384fed0d946566d55a6267
- SHA1 32726dc4f3fb2bbb741a0d80db284184fbc846d2
- SHA512 9c3c52f6d62a44f695a776b2a4abbfb4bedcf42d403b9478aeec284e4328f59c92d6c79040cc44b041715c9ad0adf90c5db4c172d10f58f4d61e7783edd4c1a5
- SSDEEP 49152:2F8YC0L5P4YVFiNFztNDUjGzSJtrBtvuM7RZfXOlNmr:2Hl44M5oJ3N1Zys
- TLSH T1BAD5DF50B64AB3A2C545DCBCAB3BB79B2D792C600B5194D3B3D0388855B16F721FAE43
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
OverWack.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
OverWack.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target OverWack.exe
- Size 2.7MB
- SHA256 fcc0171f54cb2da2e1a3a18a051e1ff522c2618ef275b0eb752feca3c418d6c2
- MD5 3dbde75138384fed0d946566d55a6267
- SHA1 32726dc4f3fb2bbb741a0d80db284184fbc846d2
- SHA512 9c3c52f6d62a44f695a776b2a4abbfb4bedcf42d403b9478aeec284e4328f59c92d6c79040cc44b041715c9ad0adf90c5db4c172d10f58f4d61e7783edd4c1a5
- SSDEEP 49152:2F8YC0L5P4YVFiNFztNDUjGzSJtrBtvuM7RZfXOlNmr:2Hl44M5oJ3N1Zys
- TLSH T1BAD5DF50B64AB3A2C545DCBCAB3BB79B2D792C600B5194D3B3D0388855B16F721FAE43
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.