General
- Target tmpyke845oi
- Size 611KB
- Sample260525-ahn4eacz4z
- SHA256 8ed19e85a5cd5fb0106e4066523fed1f8b100ef0ad557198fba10749cafabf1e
- MD5 3b68ff7b7620057a246d81f646d41287
- SHA1 ae0d33b69684d2e095c4b5622344f69dd12ca553
- SHA512 08b0029b7a7a805b4500dd12753afc0ad3a6be494d8d29a560567692ac1e841a7117ccfb70d643df469147dd42200372ade6a403c004bb07c3093de1136dd31a
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrruT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNuBVEBl/91h
- TLSH T148D47D06F243EAF7C4970570124BF7BF4230E6318412DF8AB6889D5AB9379F52A4E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpyke845oi
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpyke845oi
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpyke845oi
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://www1.gggatat456.com/dd.rar
-
ppp.gggatat456.com:6001
-
ppp.xxxatat456.com:6001
-
ddd.dddgata789.com:6001
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmpyke845oi
- Size 611KB
- SHA256 8ed19e85a5cd5fb0106e4066523fed1f8b100ef0ad557198fba10749cafabf1e
- MD5 3b68ff7b7620057a246d81f646d41287
- SHA1 ae0d33b69684d2e095c4b5622344f69dd12ca553
- SHA512 08b0029b7a7a805b4500dd12753afc0ad3a6be494d8d29a560567692ac1e841a7117ccfb70d643df469147dd42200372ade6a403c004bb07c3093de1136dd31a
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrruT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNuBVEBl/91h
- TLSH T148D47D06F243EAF7C4970570124BF7BF4230E6318412DF8AB6889D5AB9379F52A4E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10