General
- Target tmp5npip3cc
- Size 610KB
- Sample260601-3mt5fag16x
- SHA256 af4323d7f8b4626eaa5e110a3bfb59f1dd2b555cd7a5b801b667af80e306ff74
- MD5 e555d685a5162bcef0f59a34a68ef819
- SHA1 3ac8465d231841b93aeb4caeee56490c7e4748b8
- SHA512 ee9401e7341f5b2d14298b8332c03b9404535c0c3e2eb6286dd77bf01645334fb0765e16b49b0513b3983e727328200da29b33f64d175056ea7e331d2899f471
- SSDEEP 12288:WBmHsnhar0nJ7FGY5HRYxC1mqiL40qFCWU7k/3U6yZNnXgW4UlUuTh1AG:WBmHgaUVFGAR11mTL40q/5GpXgUl/91h
- TLSH T10AD47D06E383EAF7C4970570124BF7BF4230E2358452DF8AB6889D1AB9379F56A4D352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmp5npip3cc
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmp5npip3cc
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmp5npip3cc
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://www1.gggatat456.com/dd.rar
-
ppp.gggatat456.com:1522
-
ppp.xxxatat456.com:1522
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmp5npip3cc
- Size 610KB
- SHA256 af4323d7f8b4626eaa5e110a3bfb59f1dd2b555cd7a5b801b667af80e306ff74
- MD5 e555d685a5162bcef0f59a34a68ef819
- SHA1 3ac8465d231841b93aeb4caeee56490c7e4748b8
- SHA512 ee9401e7341f5b2d14298b8332c03b9404535c0c3e2eb6286dd77bf01645334fb0765e16b49b0513b3983e727328200da29b33f64d175056ea7e331d2899f471
- SSDEEP 12288:WBmHsnhar0nJ7FGY5HRYxC1mqiL40qFCWU7k/3U6yZNnXgW4UlUuTh1AG:WBmHgaUVFGAR11mTL40q/5GpXgUl/91h
- TLSH T10AD47D06E383EAF7C4970570124BF7BF4230E2358452DF8AB6889D1AB9379F56A4D352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10