General
- Target genimi.exe
- Size 70.9MB
- Sample260910-tsjq8adg26
- SHA256 87f544010510bffc81a21592971cf4f03331d594d401657761b6c83a533eb96f
- MD5 4ea227d21d235e3985511c35b42bf361
- SHA1 0b7b013f6681f7ff379b201927795851ab949d38
- SHA512 0f06da3d6647b9b2118187c5a232d535b56f3a9e1255d58226b397c130f87f81f6c0a20c046b0918141b1a58d171bb3fc96efb8952103a4f56fca8bebcab7fcf
- SSDEEP 1572864:2vUMOtOJQ+dy2J0f0/rBdsG7bpip0WWRiI3K4cNPZPrZq:YUXCQI5BB7tE0Wka4chlZq
- TLSH T1DEF733258812576FF3499372E2F1D47F7B97018F876A809917808A0B9F6B2D6CD39C63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
genimi.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
genimi.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target genimi.exe
- Size 70.9MB
- SHA256 87f544010510bffc81a21592971cf4f03331d594d401657761b6c83a533eb96f
- MD5 4ea227d21d235e3985511c35b42bf361
- SHA1 0b7b013f6681f7ff379b201927795851ab949d38
- SHA512 0f06da3d6647b9b2118187c5a232d535b56f3a9e1255d58226b397c130f87f81f6c0a20c046b0918141b1a58d171bb3fc96efb8952103a4f56fca8bebcab7fcf
- SSDEEP 1572864:2vUMOtOJQ+dy2J0f0/rBdsG7bpip0WWRiI3K4cNPZPrZq:YUXCQI5BB7tE0Wka4chlZq
- TLSH T1DEF733258812576FF3499372E2F1D47F7B97018F876A809917808A0B9F6B2D6CD39C63
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Adds Run key to start application
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.