General
- Target Diversion.exe
- Size 22.1MB
- Sample260916-2w7lfsfc65
- SHA256 bfab5f7c40b28d79001c256f43760d6748b265650cdda10407a36bcde2d15d6b
- MD5 373ec267c6ebac5f47e578b179c636a8
- SHA1 a16e443c80f10cbe118ee4549870973875295ae0
- SHA512 f6af51e34ce4adeff0a2d8d198edbd042ca89ba2f25c52cd5caaa9495b675e39467bcca2955feeac8f59d7f8013cab3a6a4d8a73354b9695bb6bcb66038df321
- SSDEEP 393216:Z8don7L1F9SxgIfUKOc0/XEAphVt+5IwQSg+IeXZzC+ltTNvF7G0C/YldV:Z8+pvQ58KPyRphMBo+IaZzFltpvF7RV
- TLSH T1B3373399BB504E26F8AA123C65D48B16A2F1FD601F5287EF0BF139441D3B2D48F746E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Diversion.exe
Resource
win10v2004-20260911-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Diversion.exe
Resource
win11ltsc2024-20260911-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Diversion.exe
- Size 22.1MB
- SHA256 bfab5f7c40b28d79001c256f43760d6748b265650cdda10407a36bcde2d15d6b
- MD5 373ec267c6ebac5f47e578b179c636a8
- SHA1 a16e443c80f10cbe118ee4549870973875295ae0
- SHA512 f6af51e34ce4adeff0a2d8d198edbd042ca89ba2f25c52cd5caaa9495b675e39467bcca2955feeac8f59d7f8013cab3a6a4d8a73354b9695bb6bcb66038df321
- SSDEEP 393216:Z8don7L1F9SxgIfUKOc0/XEAphVt+5IwQSg+IeXZzC+ltTNvF7G0C/YldV:Z8+pvQ58KPyRphMBo+IaZzFltpvF7RV
- TLSH T1B3373399BB504E26F8AA123C65D48B16A2F1FD601F5287EF0BF139441D3B2D48F746E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.