General
- Target 39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46
- Size 440KB
- Sample260321-gwvxfaat3p
- SHA256 39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46
- MD5 c602435cd70be9994ef0239eb5e86e1a
- SHA1 699ab43866912435bace041de353dc6ec2434694
- SHA512 feda99843e51738d240158c662df7aeb38845a1be11192292a82dc39c82d623ba82ead61adae04fee126e7d3ac8c745ea478b3c0b71a085f444a0493027a901a
- SSDEEP 12288:wnZItcQLG98Yp4upJFBANIwDN7hQ1ONtZ:wnZItciYp4yJANVNDB
- TLSH T1C9A48D227651C432E0DA053495A79BB24EBEB83317A590CFF7E04E791E603D1EA3439B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46.dll
Resource
win10v2004-20260130-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46.dll
Resource
win11-20260130-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
206.238.220.23:6666
Attributes
-
campaign_date
2026. 3.15
Targets
-
- Target 39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46
- Size 440KB
- SHA256 39dd25ec49caa2cb5908f39762a1072982ad82cefa89b04d8eb8eb1eaf74ea46
- MD5 c602435cd70be9994ef0239eb5e86e1a
- SHA1 699ab43866912435bace041de353dc6ec2434694
- SHA512 feda99843e51738d240158c662df7aeb38845a1be11192292a82dc39c82d623ba82ead61adae04fee126e7d3ac8c745ea478b3c0b71a085f444a0493027a901a
- SSDEEP 12288:wnZItcQLG98Yp4upJFBANIwDN7hQ1ONtZ:wnZItciYp4yJANVNDB
- TLSH T1C9A48D227651C432E0DA053495A79BB24EBEB83317A590CFF7E04E791E603D1EA3439B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects ValleyRAT payload
-
Valleyrat_s2 family