General
- Target MVPN_by_8xZQ.exe
- Size 10.3MB
- Sample260531-bdp1kshx9p
- SHA256 101c9378d8cf637d15219b2c4bab489a5741af082ed26c8b8e6f56973ee76298
- MD5 54c163fa1e62322728d34662d0d4a191
- SHA1 805ce3f4061f93f8e41ca6c472fa5f455706ff02
- SHA512 5e13ee6b46fdadab892ae85f8a6b449c2609e3363c80ded11e2049fd82e404c5efd736dfa3b96d3a99c2c00c97011d9ff892bee746d8e6b0982d179bae4331af
- SSDEEP 196608:TmQYo0W8UA3urHmHD9BKG+5fc2S/ErXKEtw+J4Jkz9Rwpr2Zwl6RoFmKPMsqZTm0:aNW8XuCHDvV+53SM8+JLwqYkDl
- TLSH T120B633883BD509F8E89AF23ED8C08C666361B51207A1CA8B57F45D710DB71E8FD35B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
MVPN_by_8xZQ.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
MVPN_by_8xZQ.exe
Resource
win11-20260513-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target MVPN_by_8xZQ.exe
- Size 10.3MB
- SHA256 101c9378d8cf637d15219b2c4bab489a5741af082ed26c8b8e6f56973ee76298
- MD5 54c163fa1e62322728d34662d0d4a191
- SHA1 805ce3f4061f93f8e41ca6c472fa5f455706ff02
- SHA512 5e13ee6b46fdadab892ae85f8a6b449c2609e3363c80ded11e2049fd82e404c5efd736dfa3b96d3a99c2c00c97011d9ff892bee746d8e6b0982d179bae4331af
- SSDEEP 196608:TmQYo0W8UA3urHmHD9BKG+5fc2S/ErXKEtw+J4Jkz9Rwpr2Zwl6RoFmKPMsqZTm0:aNW8XuCHDvV+53SM8+JLwqYkDl
- TLSH T120B633883BD509F8E89AF23ED8C08C666361B51207A1CA8B57F45D710DB71E8FD35B62
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.