General
- Target Athena.exe
- Size 73.1MB
- Sample261023-whp7csdc92
- SHA256 373ee3efcdbd6f9e66fbc2ec7f3404fef4c07e9c8efdd491ea020b58c1dcc8a5
- MD5 e2819c691ccecb0ee43687beac2f85a6
- SHA1 6ba7397c1804b215d76fd4bb8b593393f7abe7d8
- SHA512 c816b0fe0407a1fd46d9d39fb740759a16c38fc7039e20bccd4c74a2e72a0db8e01e6b1905826abd2492f46f4a77d576171cb714ee5616ea8f67d00dc1a64706
- SSDEEP 393216:AlB3+YhKxsl5AGJQyyy0CwMgEbjwP7/C:Az3HhKOulfWvwj
- TLSH T1F9F75B43FA252CD0E5ADC574CAB655237B303CB8672023DB6B54B6202F6F7D429BA718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Athena.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target Athena.exe
- Size 73.1MB
- SHA256 373ee3efcdbd6f9e66fbc2ec7f3404fef4c07e9c8efdd491ea020b58c1dcc8a5
- MD5 e2819c691ccecb0ee43687beac2f85a6
- SHA1 6ba7397c1804b215d76fd4bb8b593393f7abe7d8
- SHA512 c816b0fe0407a1fd46d9d39fb740759a16c38fc7039e20bccd4c74a2e72a0db8e01e6b1905826abd2492f46f4a77d576171cb714ee5616ea8f67d00dc1a64706
- SSDEEP 393216:AlB3+YhKxsl5AGJQyyy0CwMgEbjwP7/C:Az3HhKOulfWvwj
- TLSH T1F9F75B43FA252CD0E5ADC574CAB655237B303CB8672023DB6B54B6202F6F7D429BA718
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Command and Scripting Interpreter: PowerShell
Run Powershell to get system information as a root user.
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.