General
- Target AetherHub rb.exe
- Size 25.8MB
- Sample261012-s8mblsct21
- SHA256 04f137c7d4a880c46474cb64411a1f26e0b79f15b48a75051c158c44ede862a3
- MD5 a9ec8b6c0790d1069cf64c4324b1c9c8
- SHA1 fab3865f178177722c9d040b5ec40c51a32e93e9
- SHA512 c564b5fe5dc3af785f27651c0802bf1ded82257a3fde1b1f507f697c1695f02878b99106b3b114a26367f4b56092a27c59f8e26b3066436da1d4595a673a81a5
- SSDEEP 393216:C4fm1xbPTANJSAXOgARrCgQ3kb0/Q4tN/TrDsZNuwirJd0Wl6m3FF309luZ:C4szTwJfkrjoM0oON/TrcmrJGE6mc
- TLSH T1AB57234369E691D8DB970E30668512CA36C1B1FE8CFD965E36C68C036160FBB4D89E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AetherHub rb.exe
Resource
win10v2004-20260911-en
7 signatures
900 seconds
Behavioral task
behavioral2
Sample
AetherHub rb.exe
Resource
win11ltsc2024-20260911-en
2 signatures
900 seconds
Malware Config
Targets
-
- Target AetherHub rb.exe
- Size 25.8MB
- SHA256 04f137c7d4a880c46474cb64411a1f26e0b79f15b48a75051c158c44ede862a3
- MD5 a9ec8b6c0790d1069cf64c4324b1c9c8
- SHA1 fab3865f178177722c9d040b5ec40c51a32e93e9
- SHA512 c564b5fe5dc3af785f27651c0802bf1ded82257a3fde1b1f507f697c1695f02878b99106b3b114a26367f4b56092a27c59f8e26b3066436da1d4595a673a81a5
- SSDEEP 393216:C4fm1xbPTANJSAXOgARrCgQ3kb0/Q4tN/TrDsZNuwirJd0Wl6m3FF309luZ:C4szTwJfkrjoM0oON/TrcmrJGE6mc
- TLSH T1AB57234369E691D8DB970E30668512CA36C1B1FE8CFD965E36C68C036160FBB4D89E73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger