General
- Target tmpu6bcts6h
- Size 603KB
- Sample260601-3gl7msav7p
- SHA256 7aa8eab2f01783bfe9bb7d8e051baebf563629645d73b2af42022d28a8143179
- MD5 a15e9d2d69c1407ac5b42ba46d71fc58
- SHA1 5a124a3a2f363bd3740ab792044d9a06dc4256d5
- SHA512 f38eeae08e03f19339d03b01a271df14284bd22194887b492c24f6e4c89ef7b416507350cab6a5de8d90084519703b78cd844f35a54a4fa13b8643f0c6a395c5
- SSDEEP 12288:R40XBrnlTCbI5ZBP5IePtqLn4yFeC+oT6ygF9b4elMuThmVF:e01tCbqNNPtqLn4yFmoEbdlH9mn
- TLSH T13CD46D06E283EAF7C8970570124BF7BF8230E2318452DF86B7989D5AB9379F5664D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpu6bcts6h
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpu6bcts6h
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpu6bcts6h
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://info1.3000uc.com/b/u.php
-
gh.dsaj2a1.org:2822
-
www.wangzongfacai.com:2822
-
174.139.217.145:2822
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmpu6bcts6h
- Size 603KB
- SHA256 7aa8eab2f01783bfe9bb7d8e051baebf563629645d73b2af42022d28a8143179
- MD5 a15e9d2d69c1407ac5b42ba46d71fc58
- SHA1 5a124a3a2f363bd3740ab792044d9a06dc4256d5
- SHA512 f38eeae08e03f19339d03b01a271df14284bd22194887b492c24f6e4c89ef7b416507350cab6a5de8d90084519703b78cd844f35a54a4fa13b8643f0c6a395c5
- SSDEEP 12288:R40XBrnlTCbI5ZBP5IePtqLn4yFeC+oT6ygF9b4elMuThmVF:e01tCbqNNPtqLn4yFmoEbdlH9mn
- TLSH T13CD46D06E283EAF7C8970570124BF7BF8230E2318452DF86B7989D5AB9379F5664D312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10