General
- Target 09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a.exe
- Size 9.4MB
- Sample250727-kv26xaxtfz
- SHA256 09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a
- MD5 73f4c57ded70718440eaeb5dce22ec47
- SHA1 2ecf43168a2dd41b8c996cb0a63511d0e8bcc03e
- SHA512 edc5fab7cc8a9d4974f69a86fceb71feff47dd665898a735c6df4af94e555ea4c2de46cd48d5cefd79ed7ef2743f1266dc0b191fa32093b0e95036390ba6efc9
- SSDEEP 196608:I+D5q1SGs2yRwtkpqShRWhR1hRPhRGhRjhRt:DAkLRCR3RZRyRFRt
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a.exe
Resource
win10v2004-20250619-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a.exe
Resource
win11-20250619-en
4 signatures
150 seconds
Malware Config
Extracted
Family
-
gravityrat
C2
-
https://ent34ndx3cz8k.x.pipedream.net
-
.b17da333ec194ec4b767.d.requestbin.net
Targets
-
- Target 09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a.exe
- Size 9.4MB
- SHA256 09f2f7c1cfe4d4c8b71f77ac40805c3fd05a432f745d5fe56f007cbbe949fb9a
- MD5 73f4c57ded70718440eaeb5dce22ec47
- SHA1 2ecf43168a2dd41b8c996cb0a63511d0e8bcc03e
- SHA512 edc5fab7cc8a9d4974f69a86fceb71feff47dd665898a735c6df4af94e555ea4c2de46cd48d5cefd79ed7ef2743f1266dc0b191fa32093b0e95036390ba6efc9
- SSDEEP 196608:I+D5q1SGs2yRwtkpqShRWhR1hRPhRGhRjhRt:DAkLRCR3RZRyRFRt
- MD5 SHA1 SHA512 SSDEEP
Score6/10Adds Run key to start application
Drops desktop.ini file(s)
Drops file in System32 directory