General
- Target 9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22
- Size 496KB
- Sample260407-ex92msgs6m
- SHA256 9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22
- MD5 76e6d004fbc065aaa92b3f8fa1958d8c
- SHA1 b12364f711a3b38aa882ebf468933e9a27233b77
- SHA512 f1c525a708b7bac64ab4449dd84b5c028dbff4e7651e9ce9892adcd2f06bd1f74bd9c41b8ffdcae9dd7c595b04ff919289be4a83c70276a8bd652731c8fa469c
- SSDEEP 12288:D3z0ckDaZNGVhBEXEgBsdsGgn/sAizsQ1ONtZ:D3z0czXGVhBKsKGOsAizsDB
- TLSH T11DB49D217690C032D09B153495BB9B721EBE783257B5A0CFFB941E7E1E703E1AA3435A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22.dll
Resource
win10v2004-20260130-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22.dll
Resource
win11-20260130-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
64.81.30.152:6666
Targets
-
- Target 9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22
- Size 496KB
- SHA256 9b59785af6dd10200f8c5743dce05c0dc8aed3e3ce7361c697ee47ab0ef93c22
- MD5 76e6d004fbc065aaa92b3f8fa1958d8c
- SHA1 b12364f711a3b38aa882ebf468933e9a27233b77
- SHA512 f1c525a708b7bac64ab4449dd84b5c028dbff4e7651e9ce9892adcd2f06bd1f74bd9c41b8ffdcae9dd7c595b04ff919289be4a83c70276a8bd652731c8fa469c
- SSDEEP 12288:D3z0ckDaZNGVhBEXEgBsdsGgn/sAizsQ1ONtZ:D3z0czXGVhBKsKGOsAizsDB
- TLSH T11DB49D217690C032D09B153495BB9B721EBE783257B5A0CFFB941E7E1E703E1AA3435A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Detects ValleyRAT payload
-
Valleyrat_s2 family