General
- Target loader-v3.exe
- Size 722KB
- Sample260910-hk6egasvev
- SHA256 779532ad5d691d37d524b28a382b8bcc52e1c791eb17d1546de58de6f2f92b85
- MD5 0bfc49a736dbfbff2a7cb741e2927e1e
- SHA1 c9565f52a578794ffa5c858e1bae287b63430609
- SHA512 ecb604391acf95673a510d557a93bec39031b7df00fa9ac0ef46f92d88e8d6e97b3a4753e2459d533507e93db0e9de20fe62d2feed3d736fd116054f0ae04d83
- SSDEEP 12288:Gg0oaGLoxZ8NUEuJkPnnKxzWSHN6f+QFCaIfjjXona:G8zLoxZ8qGnnKx/aIfjjXona
- TLSH T182F4B58225DB0CE9EDD32B7861D7633AA736FE70CB7A8B6A8144C13158136D17C6EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader-v3.exe
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader-v3.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target loader-v3.exe
- Size 722KB
- SHA256 779532ad5d691d37d524b28a382b8bcc52e1c791eb17d1546de58de6f2f92b85
- MD5 0bfc49a736dbfbff2a7cb741e2927e1e
- SHA1 c9565f52a578794ffa5c858e1bae287b63430609
- SHA512 ecb604391acf95673a510d557a93bec39031b7df00fa9ac0ef46f92d88e8d6e97b3a4753e2459d533507e93db0e9de20fe62d2feed3d736fd116054f0ae04d83
- SSDEEP 12288:Gg0oaGLoxZ8NUEuJkPnnKxzWSHN6f+QFCaIfjjXona:G8zLoxZ8qGnnKx/aIfjjXona
- TLSH T182F4B58225DB0CE9EDD32B7861D7633AA736FE70CB7A8B6A8144C13158136D17C6EB50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1