General
- Target SLIV.exe
- Size 253KB
- Sample260421-ppln7aas2y
- SHA256 d658bd89ddad39467bd7682af6e6fc5c135909ba9020f32f0f9de293fb4edf5d
- MD5 161eda014bfcc4cf1d31dced50c1891b
- SHA1 896035733d1ae2fe9f2c40a7b7650baae7a4bd28
- SHA512 e66aed18b80d73c20cefe67293df92ed7656767936d84c0ec9216acaf3fb9b38c0f4fb80d28731fa31008e25136c7220fc5e43e8e720d2038d24247272e613fe
- SSDEEP 3072:F09rlw1qZn9LzxFn6QDsBXbW8KPZfxyEyY+T4RUGKXs+S++7KFSbxeY+qDDrMs:Mbl1J6yabW/F6dGqStKEbxI
- TLSH T198445D2EBF477C96C4180DB68463929407ACDF95F467A7DA34D86EBCBAD3838CD04A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SLIV.exe
Resource
win10v2004-20260130-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
SLIV.exe
Resource
win11-20260130-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target SLIV.exe
- Size 253KB
- SHA256 d658bd89ddad39467bd7682af6e6fc5c135909ba9020f32f0f9de293fb4edf5d
- MD5 161eda014bfcc4cf1d31dced50c1891b
- SHA1 896035733d1ae2fe9f2c40a7b7650baae7a4bd28
- SHA512 e66aed18b80d73c20cefe67293df92ed7656767936d84c0ec9216acaf3fb9b38c0f4fb80d28731fa31008e25136c7220fc5e43e8e720d2038d24247272e613fe
- SSDEEP 3072:F09rlw1qZn9LzxFn6QDsBXbW8KPZfxyEyY+T4RUGKXs+S++7KFSbxeY+qDDrMs:Mbl1J6yabW/F6dGqStKEbxI
- TLSH T198445D2EBF477C96C4180DB68463929407ACDF95F467A7DA34D86EBCBAD3838CD04A50
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.