General
- Target [FR] 37.66.27.229.zip
- Size 10.4MB
- Sample260517-mem36aey9x
- SHA256 52373e097c3cbc6ae6a789697125e0f2da1b8e0053a59130e432365d4d666090
- MD5 7e2ed27f1d7ec623abc3a5f0a19d71dc
- SHA1 b57cd44fa002c9a19e6d60e62409e1a5fd7f9b72
- SHA512 e82babdaa77adcabc029c9b462e375866ec94e61932bbda911a194691cb9d4766668d58586ce30c269839ddcc588e5a1280e86ef8be6bae7499a7f96612a370f
- SSDEEP 196608:sibyRZsAPipMKrOhCIduEnE1Co/26CtJcYAzc10LaNLYpi2zKR18LSNlhVb3sK:nORKxpMKpIYECCY26C3TsccS+Gz8uNtR
- TLSH T13AB6332797F13663F04CE5322A8203A3D868D1EB51E27244DC7176F9F425CBB8D527AA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Files/Telegram Files/Overdrive.exe
Resource
win11-20260513-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target Files/Telegram Files/Overdrive.exe
- Size 6.7MB
- SHA256 ca6ebc974547f34ba9ae0325b031768a5bd30dbef95ddf5d4201662ee317a347
- MD5 9b455406802cc7f24f0c65317a3950fb
- SHA1 d047e3586e52f71f3dc7c778ce11d494bd1e48c4
- SHA512 12961580f473512b13235854a8b18e7c170e9bbed841c3679b2c72c153eb2cba903d5ceb61c851b0af0eb328fafc24192a5fb84566ef080b7d1a66af81dc395c
- SSDEEP 98304:Fotj3hLMpc0UV8sTdCPG5b/1aBvZ3ZC1PeU78jVY++y:FotjhLMpcJVRdCPG5b/1aBxygYy
- TLSH T187669DA9A2BC01D5D8ABC1B8C2465227EB72785517B057CF5A649AF60F23FE01F7B700
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.