General
- Target TTActivator.exe
- Size 2.3MB
- Sample261003-mcvefswelf
- SHA256 01c59e99e0a030a65f1fed131c1789cbb9de3851332da5bc3b1be621d17291d7
- MD5 60f64eaa66f439ffb4020f634c696395
- SHA1 f340dfd58102dc014cfe155f8576f75791663737
- SHA512 a83ab1ce2192d2ecd50ba2b52898563c1d164729b269875acc79a77af7c66b6a06517ddf5bc407106d87f425a3993621c0702fbfacbd4149fe4fd36d84b5b47d
- SSDEEP 49152:IC79zB7PqDjGLMJNDpRRLPucgD54LBKEeoCEi7:ICJkfakDpTbMweoCH7
- TLSH T166B533168658D113C47B7CB1A33A01CAEFB7DC197784DE0A53DE7EB450B2E80ACDA256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TTActivator.exe
Resource
win10v2004-20260911-en
4 signatures
40 seconds
Behavioral task
behavioral2
Sample
TTActivator.exe
Resource
win11ltsc2024-20260911-en
4 signatures
40 seconds
Malware Config
Targets
-
- Target TTActivator.exe
- Size 2.3MB
- SHA256 01c59e99e0a030a65f1fed131c1789cbb9de3851332da5bc3b1be621d17291d7
- MD5 60f64eaa66f439ffb4020f634c696395
- SHA1 f340dfd58102dc014cfe155f8576f75791663737
- SHA512 a83ab1ce2192d2ecd50ba2b52898563c1d164729b269875acc79a77af7c66b6a06517ddf5bc407106d87f425a3993621c0702fbfacbd4149fe4fd36d84b5b47d
- SSDEEP 49152:IC79zB7PqDjGLMJNDpRRLPucgD54LBKEeoCEi7:ICJkfakDpTbMweoCH7
- TLSH T166B533168658D113C47B7CB1A33A01CAEFB7DC197784DE0A53DE7EB450B2E80ACDA256
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.