General
- Target 29ym-Optimizer-v0.6.1-Release.zip
- Size 416KB
- Sample261027-28c8dahs8p
- SHA256 e507eaec5fab272c74630e5f28e067456129e4a6dd0249e615218a18ec05eb68
- MD5 07650a63d8444bad9d7ed323e6ebab0d
- SHA1 14a5f7da86f4e9a32727faf6cc8f6ac1521f2c0a
- SHA512 d514060c31640d221fbba5194271f264da5791ea0eff725660ad3a57a31f45e8c65f4725d7cf5a2d9699d3ba98ed79de29b06a43691c1307b9657b2d2268cccf
- SSDEEP 12288:D5CBoo0667bhYNDltu6XP0Yb/oG/GyzLx9mm:saXhYfn9bAGuyLv
- TLSH T1EF94231ED7D48883E38C65395D9F43EBA42A586E1D833A576F3A8FD2E13B109EE70114
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
29ymOptimizer.exe
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
29ymOptimizer.exe
Resource
win11ltsc2024-20260911-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target 29ymOptimizer.exe
- Size 975KB
- SHA256 a84f579b3c6f1eb5d1e48f19f6ff76b95147c6d27ec84384b74a5ef24b9645aa
- MD5 bc3195a2e49e72be510eebe75022b5e7
- SHA1 789518c6578d44d91924feebef992115c4d3f5b3
- SHA512 0194f8ffa96ac8b6dc5e21c619c530f35d876a13606dbe51660c0b9d4ace13c30c537f034d0d3b27dac8740c4183fab2e44d0f40f6f560848532b3f942f8baed
- SSDEEP 12288:LyUnnEwiKXWjnvyO/mfKYsdcs/XLZcdyO/mfKYsd:JnENh/wKDB/7Zcv/wKD
- TLSH T1BE25B613F2EDED57E6F666356474913009BA78BEC6F2D1ED3D8805AD24A4A008F58B33
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.