General
- Target XyronFreeMacro.exe
- Size 674KB
- Sample261014-flcgnswt9j
- SHA256 74263475b68cfe8f65fc637b52fb90389a504112bd4d8cc4b60abea28eb7fa59
- MD5 811e3fc52126a72a7708541a599b0657
- SHA1 35305ee09e49475196460fd6bd9252f15cd47c44
- SHA512 ca6098cfa83eaa7014d61e7eeeb12b8ce9ddab731b2627f6093700178fe65dec355aaa7643e0e3ce94b35327cc41cd0fa0868a543af703a06632836c7b86dc41
- SSDEEP 12288:E3TCweQE39Na8PnQ4x6NcLM57Q4x6NcLM5Ezj5oWQ9/4gZ:YS9NaQQQxLMBQQxLMOOW6Q
- TLSH T193E4D02162D501FDE27B967094A25E26EA73B84103B49ADF33AC86570F276C09F3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
XyronFreeMacro.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
XyronFreeMacro.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target XyronFreeMacro.exe
- Size 674KB
- SHA256 74263475b68cfe8f65fc637b52fb90389a504112bd4d8cc4b60abea28eb7fa59
- MD5 811e3fc52126a72a7708541a599b0657
- SHA1 35305ee09e49475196460fd6bd9252f15cd47c44
- SHA512 ca6098cfa83eaa7014d61e7eeeb12b8ce9ddab731b2627f6093700178fe65dec355aaa7643e0e3ce94b35327cc41cd0fa0868a543af703a06632836c7b86dc41
- SSDEEP 12288:E3TCweQE39Na8PnQ4x6NcLM57Q4x6NcLM5Ezj5oWQ9/4gZ:YS9NaQQQxLMBQQxLMOOW6Q
- TLSH T193E4D02162D501FDE27B967094A25E26EA73B84103B49ADF33AC86570F276C09F3F721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger