General
- Target hotwing-cli-win.zip
- Size 9.1MB
- Sample261027-hnsb1sch74
- SHA256 2fdddca3308974bbf4bbf1df573a5f5ac524028b4fdc040d14aa978129b533f2
- MD5 a22536e40dd3e17d022a895c94080ba8
- SHA1 d90a1cc9886dca0e1a1b04bf553b72fee495cae0
- SHA512 9f85c804dbf2b720ceb3733ae8547acdbe79bb061536584ff868c70da3d928998ee7d5b972e2691dc30a1d44ece10c6d3e416d0d4047b92b2293f58c88b3e191
- SSDEEP 196608:NTvurKGAgWyWTXPeNV1nfNO1hLDqtY87rpZqN/JgxLzrKrlHWgsmcegaJWc:NTvtGxMeNPnFO1hLDaHRZdLzrdgsZaJx
- TLSH T1BFA6339FB3260159991B9ADB07F7B3B3646C130EC619E03BB4E657354F0BA356A8270C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
hotwing-cli/hotwing-cli.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
hotwing-cli/hotwing-cli.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
hotwing-cli/parse_config.bat
Resource
win10v2004-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target hotwing-cli/hotwing-cli.exe
- Size 9.2MB
- SHA256 e3d93b0d4dd460bfce2bbfce8c19ac0e953c13c99ee3a7439c22b69fc203feca
- MD5 4497bcc99e54dddf826234698add6ab9
- SHA1 bd1a34acc57502560278ca62eb47234b033157a2
- SHA512 009110e38fbe558cc24c38141b5ff462e4e99610a016c546b5a1c375af184ae382126060b09218e1359d39e6098ad006a84982e1b436190979789110ad2a03b3
- SSDEEP 196608:AgkE/9cgavwmxXPwZF/6L9dTNuTn/7nn/MxtLfurK9dKHRZBkBewwdU4:AM/9laRwZ10dTNEn/D/rEKHRoepU
- TLSH T1D1A63328B29044B3D07B54720BF3E273747DBA158709E4A7AAF85B371E16B613AB570C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
- Target hotwing-cli/parse_config.bat
- Size 110B
- SHA256 f56dba8a048918a756acdeac2ec7547e2557bea91ce1e7dd831d81b706e2100e
- MD5 618590f7a8a45ef7d264b3cb6d212841
- SHA1 8e75632758032c2a9483ff4f07420e98e331b058
- SHA512 a8238a91c8c9c6067793915e0d20f834628d927ca1d81946ea17daf8bad7d75b5b91f55fcee85c83ef03ce4b0fa872199f92d8b95c700d25701a2f73ee2f0b66
- TLSH T178B09202845F8832A8210EC2E83234370C2DCA7BEB024017156499E66C1850D410BA50
- MD5 SHA1 SHA512 TLSH
-
Loads dropped DLL