General
- Target 20260304_PK.zip
- Size 1.3MB
- Sample260420-w487cses7v
- SHA256 598535dc5231949e4ac7c672c5f08b64ba0d274788152d029b6366533b8b2bdc
- MD5 d7c71031fb29db9e157a2494dfc841c3
- SHA1 60e12c2e020376d3391e68844ba5e6b272052bcd
- SHA512 09ec51c4bf8f9b2e00ab8bbff74fc25c2fc78964e4290600ff0a337f2464bfb4bca5c747657a2509bb7193b2000ba5f5faeef95f937d48505b04ab95f45f4c89
- SSDEEP 24576:aRnXvIc9tuDAbKqaw/8nfxhmtHM0geOI0/bFJZqJXG4wSyhFYyw5:aRXT9UDAbsi8fjmtHETZqVBwS9yw5
- TLSH T17455338BE2FD045BDF80B75FE6449832B05674205AC70856B5F2CB4DDE85C9AAB87C32
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
VLC.exe
Resource
win10v2004-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
VLC.exe
Resource
win11-20260130-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
libvlc.dll
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
libvlc.dll
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target VLC.exe
- Size 1021KB
- SHA256 bfa5740f028a8f310ca01c779bbc5f2f1b435c41539c54de592f715bb0c10389
- MD5 f0a4d5c3492115bfe2f346bc7bdce396
- SHA1 bfcbdc7d0cbb92b68d348090fe9f381b4358a587
- SHA512 8e4b2e1852fbc821cab4a7c16675afbfa2588472faa1848600829c415bfbee7cbf4713568ba15a76916e6c761d79b0fff7c5a1ae087aabd912bb7063d38a560a
- SSDEEP 24576:uGKuKkPztKt9cHPrLRAqKBAy1N1UGAmnnnFnnnZnnnGnnnsddodt:uGKuKkPzgt9cHTLRAqK81k8
- TLSH T1A9254B1BE7A345EDC56FC13487A7C772AA30B86942347E2E1D95DB221F10E609F2E724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target libvlc.dll
- Size 1.7MB
- SHA256 123a25150ab851b3c449d8c074f82c63ed987126ec50614c04ab2fd15fb19503
- MD5 57740338bad6ceb8e6f8c9fb67b8dc82
- SHA1 848d0e4e207fa12af304240f7cb0bdee1ce0f9a6
- SHA512 c08512963c5768f751328b1c563fac915a2659924ccf666f2f1c727dc148770559c1a0ab952b2343a86d5b10cada99d408279e6f19d86d43e334c7d5036a7a21
- SSDEEP 24576:+xFI6yAgakwJAEDD4ph47ghzsRIPl+6F7R+m0lxyJSfRJIYDlvjwQUYrpJ:UI6/gqB8hQOt+6F7RBSgypcQUSJ
- TLSH T1A1859E16FBA800B5E0F79279C9638A46D2757C49437097DF13A41A9B2F37AD08E3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.