General
- Target Tren External.exe
- Size 12.6MB
- Sample260913-bcdwxsam4y
- SHA256 b01f9191e51168f95c7ed4469549b138853477e4b34dcebb04d113e1feb65e87
- MD5 d0fd110ba62dcb6305bf1bc9e4668ea4
- SHA1 d383cc356545a1439c60b22bb1b4b7349e835d04
- SHA512 d7ef51ffcbb57efdbe92ae91d31ccbaa29444079b8a887f812ba9f6873b83f5bb0804a544754daa254afcd6965807d949684feb68fa59d4505381b4b16abc32c
- SSDEEP 49152:CL08GEO8q3b0WroXwkSwFGV+mnA+J26gVPSJ6B2jvruuMMaXgCYUG2uCFwsJ061d:E08GEtq3kwA2zrB8FuO71zYR
- TLSH T16AD662E4B1262BA4E437FD35641D7579839A5800FB39E0F788FEEE2126A4DF404353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Tren External.exe
Resource
win10v2004-20260911-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
Tren External.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target Tren External.exe
- Size 12.6MB
- SHA256 b01f9191e51168f95c7ed4469549b138853477e4b34dcebb04d113e1feb65e87
- MD5 d0fd110ba62dcb6305bf1bc9e4668ea4
- SHA1 d383cc356545a1439c60b22bb1b4b7349e835d04
- SHA512 d7ef51ffcbb57efdbe92ae91d31ccbaa29444079b8a887f812ba9f6873b83f5bb0804a544754daa254afcd6965807d949684feb68fa59d4505381b4b16abc32c
- SSDEEP 49152:CL08GEO8q3b0WroXwkSwFGV+mnA+J26gVPSJ6B2jvruuMMaXgCYUG2uCFwsJ061d:E08GEtq3kwA2zrB8FuO71zYR
- TLSH T16AD662E4B1262BA4E437FD35641D7579839A5800FB39E0F788FEEE2126A4DF404353A6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.