Overview

overview

6

Static

static

3

WFE Applic...er.exe

windows10-2004-x64

3

WFE Applic...er.exe

windows11-ltsc_2024-x64

3

WFE Applic...pp.exe

windows10-2004-x64

3

WFE Applic...pp.exe

windows11-ltsc_2024-x64

3

WFE Applic...ll.dll

windows10-2004-x64

3

WFE Applic...ll.dll

windows11-ltsc_2024-x64

3

WFE Applic...er.exe

windows10-2004-x64

6

WFE Applic...er.exe

windows11-ltsc_2024-x64

6

WFE Launcher.exe

windows10-2004-x64

3

WFE Launcher.exe

windows11-ltsc_2024-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target
    c940c98002441677156c680643b80f71004572531a580503b8ecd491f1541132
  • Size 1.9MB
  • Sample261002-mmcmdsxbjg
  • SHA256 c940c98002441677156c680643b80f71004572531a580503b8ecd491f1541132
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
discovery

Malware Config

Targets

    • Target
      WFE Application/WFE Launcher.exe
    • Size 56KB
    • SHA256 8f3d72dcd0adb14074af48bf3072ea9de7b6d0579a7a756a6bb2cc2cf50aea07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral1behavioral2
    • Target
      WFE Application/WFEApp.exe
    • Size 625KB
    • SHA256 9b5e46ed71e9978ed974996da82deb92015051f066edd03190aabdf77e51f20a
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral3behavioral4
    • Target
      WFE Application/WFEDll.dll
    • Size 643KB
    • SHA256 96f546b8d48b921abd65f37b2591bb1bc2bf591eb4f63f761a59ff441531a1a4
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral5behavioral6
    • Target
      WFE Application/WFEUpdater.exe
    • Size 106KB
    • SHA256 40f9fa689bff61b174eafbd74253d556066255e6aa8963a6871b8f71a4c377ff
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    6/10
    discovery

    • Contacts third-party web service commonly abused for C2

      Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

    behavioral7behavioral8
    • Target
      WFE Launcher.exe
    • Size 56KB
    • SHA256 8f3d72dcd0adb14074af48bf3072ea9de7b6d0579a7a756a6bb2cc2cf50aea07
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    3/10
    discovery
    behavioral10behavioral9

MITRE ATT&CK Enterprise v16

Tasks