General
- Target blessed.exe
- Size 297KB
- Sample260518-mkd3faev6m
- SHA256 970519e091dc2aef1ae08a5be91bf744e49f9849446c8e696e2aa42dcbcba98c
- MD5 d042e2691199f9bc066d3453f5237c2c
- SHA1 53557b9160d771f1347cd7d75863b0ca97323e42
- SHA512 431ac05cd564b9b5a0fda91da5536ea386e0e84d1c08ba84fb4b8c93386157c8f9bebc92d238a710155d06b67e6a1201b41666df71b11915827480bbbcdbf9bd
- SSDEEP 6144:OI8GRvHyxE0I7yM3C3hRonHBU195XhCpA3Mk2SQ6O3P3zdemRAkRY:bXRPyxE0I7ty3hMHK1LRvyfPjSkRY
- TLSH T1DA54225923805362C4BE0F7A5CB86F50CA75F0232426C3C9F8CCEBD947A3B119BA6715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
blessed.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
blessed.exe
Resource
win11-20260513-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target blessed.exe
- Size 297KB
- SHA256 970519e091dc2aef1ae08a5be91bf744e49f9849446c8e696e2aa42dcbcba98c
- MD5 d042e2691199f9bc066d3453f5237c2c
- SHA1 53557b9160d771f1347cd7d75863b0ca97323e42
- SHA512 431ac05cd564b9b5a0fda91da5536ea386e0e84d1c08ba84fb4b8c93386157c8f9bebc92d238a710155d06b67e6a1201b41666df71b11915827480bbbcdbf9bd
- SSDEEP 6144:OI8GRvHyxE0I7yM3C3hRonHBU195XhCpA3Mk2SQ6O3P3zdemRAkRY:bXRPyxE0I7ty3hMHK1LRvyfPjSkRY
- TLSH T1DA54225923805362C4BE0F7A5CB86F50CA75F0232426C3C9F8CCEBD947A3B119BA6715
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.