Overview

overview

7

Static

static

3

Valskc v2.exe

windows10-1703-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    Valskc v2.exe

  • Size

    13.9MB

  • Sample

    230320-rbdsjadg88

  • MD5

    615157975fcd5008f88c3ec3fa546d37

  • SHA1

    2a59898c26f3d5dc240940d4dd81d694a4e4757e

  • SHA256

    a1752a1fafa0c5d59a02c43055a223c89e64dc650d1e179ac94697c81a2cbef3

  • SHA512

    270631936aa8bbd3f2c6ed1cfa8418947ca3453e756ab8cb9cb08bb62534006df90e3406b79bbcf58b28ab94b49e2cdd9429234b6d42ee6d68e24c1006fba7a6

  • SSDEEP

    393216:QqPuYXJBx/m3pgDOEkSgsv9yqt+KT0e/:RPuYXJBxKlAlr/

Score
7/10
pyinstallerupx

Malware Config

Targets

    • Target

      Valskc v2.exe

    • Size

      13.9MB

    • MD5

      615157975fcd5008f88c3ec3fa546d37

    • SHA1

      2a59898c26f3d5dc240940d4dd81d694a4e4757e

    • SHA256

      a1752a1fafa0c5d59a02c43055a223c89e64dc650d1e179ac94697c81a2cbef3

    • SHA512

      270631936aa8bbd3f2c6ed1cfa8418947ca3453e756ab8cb9cb08bb62534006df90e3406b79bbcf58b28ab94b49e2cdd9429234b6d42ee6d68e24c1006fba7a6

    • SSDEEP

      393216:QqPuYXJBx/m3pgDOEkSgsv9yqt+KT0e/:RPuYXJBxKlAlr/

    Score
    7/10
    upx

    • Loads dropped DLL

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Looks up external IP address via web service

      Uses a legitimate IP lookup service to find the infected system's external IP.

    behavioral1

MITRE ATT&CK Matrix

Tasks