General
- Target agent-windows-amd64.exe
- Size 24.1MB
- Sample260928-rw21vsbc45
- SHA256 6bb9a2f6faf3b7f97e644c4fdd6bfc040112da3d8fb69034e8993ed30936b2e9
- MD5 be0e3ba1e78d42df402f2226b737af3c
- SHA1 d477f3c76cbc82f8855d20edb79e8d6ac31a1be7
- SHA512 bbe9b95f841095bb5e755fa34521a5af0b72f750590e2f4c47ff14a4c3f7aa40626d87d45ca7b5d736427ba933e0184a81a8fe225962eac5f67cafafd228b845
- SSDEEP 196608:79H2w7J5oURmB35y7wmIV0UHuGMiMhbWOQ5Hp:7Rp8B4oCGtMWJ
- TLSH T153471963E89226D4C4EEC5748672417BBA613C2E1B7823E70690B7201F3ABD0DEF6755
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
agent-windows-amd64.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
agent-windows-amd64.exe
Resource
win11ltsc2024-20260911-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target agent-windows-amd64.exe
- Size 24.1MB
- SHA256 6bb9a2f6faf3b7f97e644c4fdd6bfc040112da3d8fb69034e8993ed30936b2e9
- MD5 be0e3ba1e78d42df402f2226b737af3c
- SHA1 d477f3c76cbc82f8855d20edb79e8d6ac31a1be7
- SHA512 bbe9b95f841095bb5e755fa34521a5af0b72f750590e2f4c47ff14a4c3f7aa40626d87d45ca7b5d736427ba933e0184a81a8fe225962eac5f67cafafd228b845
- SSDEEP 196608:79H2w7J5oURmB35y7wmIV0UHuGMiMhbWOQ5Hp:7Rp8B4oCGtMWJ
- TLSH T153471963E89226D4C4EEC5748672417BBA613C2E1B7823E70690B7201F3ABD0DEF6755
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
MITRE ATT&CK Enterprise v16
Execution
Command and Scripting Interpreter
1Windows Command Shell
1Scheduled Task/Job
1Scheduled Task
1Defense Evasion
Modify Registry
1Subvert Trust Controls
2Install Root Certificate
2