General
- Target 0d75aa7f9329f493618dfbdad34214b8.exe
- Size 130KB
- Sample260113-xvmsfagw4a
- SHA256 ac2bee2bfba8b7603ead6033f90b0ce727390e66be62c0fe7c9c8b5a4aa4fce0
- MD5 0d75aa7f9329f493618dfbdad34214b8
- SHA1 b7038bbe365e6282102a591cbbf6a44c1ae1ffd4
- SHA512 b0fb65526b773250ae6959671f07f079f7a1ef44d5bf437231a3da9e867c6e41bbcbaae67a047302da13e44530d02c097401c6c72fed89a0353f31b52b6a50f3
- SSDEEP 3072:wJvr9PP8JYCBwsioRTwQJvMB2OgtEYdZUbdFz56U1e6wO:wJv5UJYU40TwkMB2OgtEsZK9+O
- MD5 SHA1 SHA512 SSDEEP
Score
10/10
Behavioral task
behavioral1
Sample
0d75aa7f9329f493618dfbdad34214b8.exe
Resource
win10v2004-20251231-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
0d75aa7f9329f493618dfbdad34214b8.exe
Resource
win11-20251229-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
47.236.29.250:6004
-
127.0.0.1:80
Attributes
-
campaign_date
2026. 1. 9
Targets
-
- Target 0d75aa7f9329f493618dfbdad34214b8.exe
- Size 130KB
- SHA256 ac2bee2bfba8b7603ead6033f90b0ce727390e66be62c0fe7c9c8b5a4aa4fce0
- MD5 0d75aa7f9329f493618dfbdad34214b8
- SHA1 b7038bbe365e6282102a591cbbf6a44c1ae1ffd4
- SHA512 b0fb65526b773250ae6959671f07f079f7a1ef44d5bf437231a3da9e867c6e41bbcbaae67a047302da13e44530d02c097401c6c72fed89a0353f31b52b6a50f3
- SSDEEP 3072:wJvr9PP8JYCBwsioRTwQJvMB2OgtEYdZUbdFz56U1e6wO:wJv5UJYU40TwkMB2OgtEsZK9+O
- MD5 SHA1 SHA512 SSDEEP
Score10/10-
Detects ValleyRAT payload
-
Valleyrat_s2 family