General
- Target tmphfzpc4j7
- Size 546KB
- Sample260601-31prwahs7t
- SHA256 c9bd6d01eb7258fef88ec5c9276431c1db45f063b316f83943e45b6a40a76783
- MD5 2a91a3170a5fd4fb3e30f3d63b9120de
- SHA1 1a7a226833f43fdaee71cb6f84914f9a1e87de81
- SHA512 2d396f7fd0e661a2f15a1f0dc51341b89d9b28f6742a4bdfb7fe9115c5c7b44d9b8ac6e1c5e492f5971c2f9595f17c4154d979f7183df23d8f52ab0e24834d3f
- SSDEEP 12288:D3P1A0+Kvdnd4Asvhc27/ao+PzENGtkZg0/CedRlZRqR6ysen:Dfm0+KlZsJc27io2zYGtk20/LdF0+8
- TLSH T100C46D06E343A2F6D8270470235BF7BB8620B23584119D97ABD5AE5AF9339F12A4D353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmphfzpc4j7
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmphfzpc4j7
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmphfzpc4j7
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
topbannersun.com:5993
-
wowapplecar.com:5993
Attributes
-
crc_polynomial
CDB88320
xor.plain
Targets
-
- Target tmphfzpc4j7
- Size 546KB
- SHA256 c9bd6d01eb7258fef88ec5c9276431c1db45f063b316f83943e45b6a40a76783
- MD5 2a91a3170a5fd4fb3e30f3d63b9120de
- SHA1 1a7a226833f43fdaee71cb6f84914f9a1e87de81
- SHA512 2d396f7fd0e661a2f15a1f0dc51341b89d9b28f6742a4bdfb7fe9115c5c7b44d9b8ac6e1c5e492f5971c2f9595f17c4154d979f7183df23d8f52ab0e24834d3f
- SSDEEP 12288:D3P1A0+Kvdnd4Asvhc27/ao+PzENGtkZg0/CedRlZRqR6ysen:Dfm0+KlZsJc27io2zYGtk20/LdF0+8
- TLSH T100C46D06E343A2F6D8270470235BF7BB8620B23584119D97ABD5AE5AF9339F12A4D353
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10