General
- Target AddonForge-v0.4.0-b25.exe
- Size 6.9MB
- Sample261102-krnjca11ft
- SHA256 1bcbb7fd7e7d18bf316912dae1463c2000068a7922dfadd66a603fff37ed7caf
- MD5 d9a74fc21e7c1847488603c074953fdc
- SHA1 df7d08ed7a9c2458694e548539a1a393c09b370f
- SHA512 37f41d2d2b2957677e5b6bb62a0c942b2bbdf98257e047607ab1ac7da9aad45b48afe6309078948845f47c973506505f1478a99f1bfcd44b685e25fd35450ea0
- SSDEEP 49152:wIDEB2eRzrcm/7/YIH/W2AWGdYnY1S0Xe1d+FwBJx9XzotLDLaea5EmDU7dWK1m6:6Y5mJVHBwd3mWtV1aiA4nX/4ekn+F
- TLSH T10E765C43F26280E8C06EC1B4835AA633FB72788E493476BB5BD45B212F66F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AddonForge-v0.4.0-b25.exe
Resource
win10v2004-20260911-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
AddonForge-v0.4.0-b25.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target AddonForge-v0.4.0-b25.exe
- Size 6.9MB
- SHA256 1bcbb7fd7e7d18bf316912dae1463c2000068a7922dfadd66a603fff37ed7caf
- MD5 d9a74fc21e7c1847488603c074953fdc
- SHA1 df7d08ed7a9c2458694e548539a1a393c09b370f
- SHA512 37f41d2d2b2957677e5b6bb62a0c942b2bbdf98257e047607ab1ac7da9aad45b48afe6309078948845f47c973506505f1478a99f1bfcd44b685e25fd35450ea0
- SSDEEP 49152:wIDEB2eRzrcm/7/YIH/W2AWGdYnY1S0Xe1d+FwBJx9XzotLDLaea5EmDU7dWK1m6:6Y5mJVHBwd3mWtV1aiA4nX/4ekn+F
- TLSH T10E765C43F26280E8C06EC1B4835AA633FB72788E493476BB5BD45B212F66F506F1D749
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.