General
- Target agent-windows-amd64-5e6da7f7.exe
- Size 80.1MB
- Sample260915-mf5plavhmb
- SHA256 681753d1e345d2e23c6b170c595b16b443a559898429aca0fcebc8cea74c99f5
- MD5 ee30a11d080a1de7bcdf450a3f0d3540
- SHA1 eaa7a3327b4db75539f9bb2bfaab6767f9d23874
- SHA512 fc82574f2f815874f16d4029eed6568404246dd6bd3cc5d8544604da57ffa61dad0453719aa3e4d05f73099958b769a41354305ca098f01ae5faf6de25433523
- SSDEEP 1572864:KCJPeawvu5hMw0+WU2CaTYkq1PyKwBeNEfXkx:lPM8Mw0fUZaFqFEqE/kx
- TLSH T17E08E047F55809E9CA69C1B5C9AF4313F770BC04172667CB1A14A738AEA77D8AE3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
agent-windows-amd64-5e6da7f7.exe
Resource
win11-20260911-en
11 signatures
600 seconds
Malware Config
Targets
-
- Target agent-windows-amd64-5e6da7f7.exe
- Size 80.1MB
- SHA256 681753d1e345d2e23c6b170c595b16b443a559898429aca0fcebc8cea74c99f5
- MD5 ee30a11d080a1de7bcdf450a3f0d3540
- SHA1 eaa7a3327b4db75539f9bb2bfaab6767f9d23874
- SHA512 fc82574f2f815874f16d4029eed6568404246dd6bd3cc5d8544604da57ffa61dad0453719aa3e4d05f73099958b769a41354305ca098f01ae5faf6de25433523
- SSDEEP 1572864:KCJPeawvu5hMw0+WU2CaTYkq1PyKwBeNEfXkx:lPM8Mw0fUZaFqFEqE/kx
- TLSH T17E08E047F55809E9CA69C1B5C9AF4313F770BC04172667CB1A14A738AEA77D8AE3E340
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Creates a file in the Startup directory
A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.
-
Executes dropped EXE
-
Loads dropped DLL
-
Checks whether UAC is enabled