1193157e2a338dbe8d057b125d36fffd2c05be694c1bfdaaf49d52e30bd08ebd

Analysis

max time kernel
141s
max time network
151s
platform
windows10-ltsc 2021_x64
resource
win10ltsc2021-20250218-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20250218-enlocale:en-usos:windows10-ltsc 2021-x64system
submitted
11/03/2025, 16:14

Target
coderoom-main/Service.exe
Size 281KB
Sample250311-tp2gvsxpv2
SHA256 31bbfded45a9815b54db6f95ea71498dc8c18eede71a3a6810bdf5b37ab5f56b
MD5 c6063e70d5165d1186696d84a18576b2
SHA1 7bfa0e4e935cdf264c84c050c717c67257a0a99f
SHA512 03e448e09092bd569c2ace54637d390d78af04a06e8e18d584885b8972289a95b0b637c05858d37bfc3fdbdaa23e21b18f8d06d72f60ae35ed39533b61f7715c
SSDEEP 3072:bjTaw17mBiuYusL/ZWNLgAlkVQFFpeC/e6PTFsNpN8LCAlSFtkSmjJ53u8mWPowV:Sifus7QniVQFFAC/PFSAGf3mNJ/
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
5	api.ipify.org

C:\Users\Admin\AppData\Local\Temp\coderoom-main\Service.exe
"C:\Users\Admin\AppData\Local\Temp\coderoom-main\Service.exe"
1⤵
PID:2860