General
- Target tmp92fwfn0_
- Size 611KB
- Sample260601-3mfl2sg16s
- SHA256 5022e32cf32a67337aec601a2078c7194c80d196c18a5e972ed6f23c276fd03f
- MD5 f45232c67ef011ef988747e6d9bbb443
- SHA1 4d7f2efa2762d3a6016a3b1ab4df4c20992da511
- SHA512 6a5bb40f6250c24e33367fd262f34da7b06355e3304ca6c442ee1ba9b0efbff58ecc90a9a0bec96483cec809796fcb31610380f5a36f745fd80ca642a3f94725
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrriT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNiBVEBl/91h
- TLSH T1DBD47D06F243EAF7C4970570124BF7BF4230E6318412DF8AB6889D5AB9379F52A4E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmp92fwfn0_
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp92fwfn0_
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp92fwfn0_
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://www.gzcfr5axf6.com/config.rar
-
bbb.wordpressau.com:3007
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmp92fwfn0_
- Size 611KB
- SHA256 5022e32cf32a67337aec601a2078c7194c80d196c18a5e972ed6f23c276fd03f
- MD5 f45232c67ef011ef988747e6d9bbb443
- SHA1 4d7f2efa2762d3a6016a3b1ab4df4c20992da511
- SHA512 6a5bb40f6250c24e33367fd262f34da7b06355e3304ca6c442ee1ba9b0efbff58ecc90a9a0bec96483cec809796fcb31610380f5a36f745fd80ca642a3f94725
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrriT6yF8EEP4UlUuTh1AG:FBXmkN/+Fhu/Qo4h9L+zNNiBVEBl/91h
- TLSH T1DBD47D06F243EAF7C4970570124BF7BF4230E6318412DF8AB6889D5AB9379F52A4E356
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10