General
- Target tmp8tf_420e
- Size 544KB
- Sample260601-3jp2bag141
- SHA256 a89c8ef292c00472850398e72e2bfa6beb9e5e460d52863faf6cefa7c6d723f5
- MD5 f44ae424e83e10004380f6aadceebb15
- SHA1 173c9062c3326d4940cf7b6cc70c1a750dda2a49
- SHA512 e05aca5a978932c4b842e04d77c717e88a82fae00e99edb7ed7c2569fbdc9b1dc70a812c21b386f3ee1535a799296e6ecbcda15d0a5e9e73afcfcff6c47bd326
- SSDEEP 12288:JbinNy0Y1nvEtXBx6DkkJmAGyPexU279WnjVZ6ySWKZ:1iNy0evmxvkJmApPexUm9cVEb
- TLSH T1EFC46D06E243A2F7D86705B0134BF7BF4620B23584129DDAB7D89D5AB9339F26A4D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmp8tf_420e
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp8tf_420e
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp8tf_420e
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
topbannersun.com:8623
-
wowapplecar.com:8623
Attributes
-
crc_polynomial
CDB88320
xor.plain
Targets
-
- Target tmp8tf_420e
- Size 544KB
- SHA256 a89c8ef292c00472850398e72e2bfa6beb9e5e460d52863faf6cefa7c6d723f5
- MD5 f44ae424e83e10004380f6aadceebb15
- SHA1 173c9062c3326d4940cf7b6cc70c1a750dda2a49
- SHA512 e05aca5a978932c4b842e04d77c717e88a82fae00e99edb7ed7c2569fbdc9b1dc70a812c21b386f3ee1535a799296e6ecbcda15d0a5e9e73afcfcff6c47bd326
- SSDEEP 12288:JbinNy0Y1nvEtXBx6DkkJmAGyPexU279WnjVZ6ySWKZ:1iNy0evmxvkJmApPexUm9cVEb
- TLSH T1EFC46D06E243A2F7D86705B0134BF7BF4620B23584129DDAB7D89D5AB9339F26A4D313
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10