General
- Target XcLeek.exe
- Size 13.9MB
- Sample260925-2phnrayz3l
- SHA256 38424c5ad412e85f71be5fd9cad05498a32a76fda199026fc7ea93e5e2132fa4
- MD5 8aa107bcc82514e5c2d03948eef6a224
- SHA1 41fdf79ebeb6e7a3e9515cf2b709aa56a2a86fc2
- SHA512 d0d782f56868a6698812389d4ba5b82dcc855237434a71555a3a7925a593102982ce09665d0092b0105968e3ed96b59073b97106683f4bef2d4918c78c538b9f
- SSDEEP 393216:xjAVo+MqV6PRWewZ6S4Mqxqz0rQpqwlc/CfoPZm:5AVo+M8anM7sc0iqwK/CfoE
- TLSH T1A8E623E23EC553A8D4A75A04A1CA1B9D70E2774DC1FE491E3BCB1C0736A0F478A86677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XcLeek.exe
Resource
win10v2004-20260911-en
12 signatures
300 seconds
Behavioral task
behavioral2
Sample
XcLeek.exe
Resource
win11ltsc2024-20260911-en
2 signatures
300 seconds
Malware Config
Targets
-
- Target XcLeek.exe
- Size 13.9MB
- SHA256 38424c5ad412e85f71be5fd9cad05498a32a76fda199026fc7ea93e5e2132fa4
- MD5 8aa107bcc82514e5c2d03948eef6a224
- SHA1 41fdf79ebeb6e7a3e9515cf2b709aa56a2a86fc2
- SHA512 d0d782f56868a6698812389d4ba5b82dcc855237434a71555a3a7925a593102982ce09665d0092b0105968e3ed96b59073b97106683f4bef2d4918c78c538b9f
- SSDEEP 393216:xjAVo+MqV6PRWewZ6S4Mqxqz0rQpqwlc/CfoPZm:5AVo+M8anM7sc0iqwK/CfoE
- TLSH T1A8E623E23EC553A8D4A75A04A1CA1B9D70E2774DC1FE491E3BCB1C0736A0F478A86677
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.