General
- Target 2fba19cf4b8b9eae332f0431bb7b9e8a66dbc47b62adfbc6b0d05716b5eef93b
- Size 527KB
- Sample260910-n4faaawvew
- SHA256 2fba19cf4b8b9eae332f0431bb7b9e8a66dbc47b62adfbc6b0d05716b5eef93b
- MD5 0e804bd7e22cf8f62f184698355bdeea
- SHA1 c731c2c995ad370f272c556ed5e4799aad85336c
- SHA512 f9a4928c3ca516ba653c2aff8f2e75502dc1262783cfa0a669eb57b48ad9c3831426e7b5e2cff5407fa4310c74f659bbd6cefeed7471dae644a85702eef3da28
- SSDEEP 12288:H7WFOWizvFs3/68Mpnu2sNLPa5kHB35V4y29S:HqFcGS7RuPa21499S
- TLSH T1ACB412ED73001B34C6C17373174C996D4B942D3A5326EEA3A2DBE05D2229664E3BFD98
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2fba19cf4b8b9eae332f0431bb7b9e8a66dbc47b62adfbc6b0d05716b5eef93b.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target 2fba19cf4b8b9eae332f0431bb7b9e8a66dbc47b62adfbc6b0d05716b5eef93b
- Size 527KB
- SHA256 2fba19cf4b8b9eae332f0431bb7b9e8a66dbc47b62adfbc6b0d05716b5eef93b
- MD5 0e804bd7e22cf8f62f184698355bdeea
- SHA1 c731c2c995ad370f272c556ed5e4799aad85336c
- SHA512 f9a4928c3ca516ba653c2aff8f2e75502dc1262783cfa0a669eb57b48ad9c3831426e7b5e2cff5407fa4310c74f659bbd6cefeed7471dae644a85702eef3da28
- SSDEEP 12288:H7WFOWizvFs3/68Mpnu2sNLPa5kHB35V4y29S:HqFcGS7RuPa21499S
- TLSH T1ACB412ED73001B34C6C17373174C996D4B942D3A5326EEA3A2DBE05D2229664E3BFD98
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Deletes itself
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.