General
- Target loader.exe
- Size 14.0MB
- Sample261009-pl1zpsev6q
- SHA256 44b5a3d437f5e67a9ccb4cd1f6d841a02cad083467a7f7205c0ed604bb1cab02
- MD5 27a36f799b7933667d6459f765873edc
- SHA1 01d168203d2c78f6ba58ee56843f840d8573003a
- SHA512 46e48e3f7052d47f1f6a30235c493b03e4f12f1bb21cf21f93898ead3fa1e2e5ce94d26b5ac73d55ccb77e9f5e3baa244ef3bdd936218533f858751ce14b50a9
- SSDEEP 393216:hl//WtS7UAcMXIX0Df57CcvCS2bmtnavBP5:LG47UAcMweHvphnm
- TLSH T1F5E633391BB034C8FE43D93D342549569DBCAE4A1031D1AF3A46F9A2D1BECC1EC2569E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 14.0MB
- SHA256 44b5a3d437f5e67a9ccb4cd1f6d841a02cad083467a7f7205c0ed604bb1cab02
- MD5 27a36f799b7933667d6459f765873edc
- SHA1 01d168203d2c78f6ba58ee56843f840d8573003a
- SHA512 46e48e3f7052d47f1f6a30235c493b03e4f12f1bb21cf21f93898ead3fa1e2e5ce94d26b5ac73d55ccb77e9f5e3baa244ef3bdd936218533f858751ce14b50a9
- SSDEEP 393216:hl//WtS7UAcMXIX0Df57CcvCS2bmtnavBP5:LG47UAcMweHvphnm
- TLSH T1F5E633391BB034C8FE43D93D342549569DBCAE4A1031D1AF3A46F9A2D1BECC1EC2569E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
XMRig Miner payload
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext