General
- Target TgWsProxy_windows.exe
- Size 13.9MB
- Sample261102-3vs74sxwfy
- SHA256 26b5f75ee1351bfd614d700b8221f64e3d3117e158ffa1e4442614c7cb409ba6
- MD5 8335168884df2283c033aca12a401bc3
- SHA1 682506abade3ae4832e6c538996563da2e351fd9
- SHA512 983e6ff1c9a1f27afa2df4c68527ae93a4eef5bfcba951d0613fc61fccc43b36c83ea77233fe98823c52ef2de55745d376cc8639340f138a38cea50d0571e02b
- SSDEEP 393216:OwLqYFxVHFFv1+TtIiFqCuARuAUax6U4WfpIlIfe/QS:T+YFrHFFv1QtI1CuAkax6U3SlIGd
- TLSH T197E63359E3F005E2D9FA863982B7C16DE672B892036193C727D006937F17BF28939B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TgWsProxy_windows.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
TgWsProxy_windows.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target TgWsProxy_windows.exe
- Size 13.9MB
- SHA256 26b5f75ee1351bfd614d700b8221f64e3d3117e158ffa1e4442614c7cb409ba6
- MD5 8335168884df2283c033aca12a401bc3
- SHA1 682506abade3ae4832e6c538996563da2e351fd9
- SHA512 983e6ff1c9a1f27afa2df4c68527ae93a4eef5bfcba951d0613fc61fccc43b36c83ea77233fe98823c52ef2de55745d376cc8639340f138a38cea50d0571e02b
- SSDEEP 393216:OwLqYFxVHFFv1+TtIiFqCuARuAUax6U4WfpIlIfe/QS:T+YFrHFFv1QtI1CuAkax6U3SlIGd
- TLSH T197E63359E3F005E2D9FA863982B7C16DE672B892036193C727D006937F17BF28939B51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.