General
- Target XcLeek.exe
- Size 4.5MB
- Sample260924-tk11jaxyaz
- SHA256 076cea57cc34d511a1d6bff86ab7df77df92b5857e6960a60351217ff462dc1c
- MD5 020c9f630f62e5baca8a5d881f0e205c
- SHA1 b951283aacfa59643f5586364dccd70c263bcd64
- SHA512 5fab429383e3616e84e74b046a4e02b09d9b06531bd5f941e8322aedb94fcec43575ac2e6836517bd0bdbcb994c033452fe704494eadb679ef0fc10203be5018
- SSDEEP 49152:rbYDdSt2LxMGsubZm6V/xYjifVDn/uEFo2Hko+uudYl1vHsOp:HY5StwxdhV/x8Sx9W2
- TLSH T14A269E83B3ED8989E0177A388752970BE3717834075583DBBF85496ADEAF4D08B76B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XcLeek.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
XcLeek.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target XcLeek.exe
- Size 4.5MB
- SHA256 076cea57cc34d511a1d6bff86ab7df77df92b5857e6960a60351217ff462dc1c
- MD5 020c9f630f62e5baca8a5d881f0e205c
- SHA1 b951283aacfa59643f5586364dccd70c263bcd64
- SHA512 5fab429383e3616e84e74b046a4e02b09d9b06531bd5f941e8322aedb94fcec43575ac2e6836517bd0bdbcb994c033452fe704494eadb679ef0fc10203be5018
- SSDEEP 49152:rbYDdSt2LxMGsubZm6V/xYjifVDn/uEFo2Hko+uudYl1vHsOp:HY5StwxdhV/x8Sx9W2
- TLSH T14A269E83B3ED8989E0177A388752970BE3717834075583DBBF85496ADEAF4D08B76B40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.