General
- Target tmpn3baf8q7
- Size 544KB
- Sample260601-3xpygahs5v
- SHA256 e157d5c74cf949af2105f513b93bc5f1e745c33d2e8e28aca333c52ec4d0ec11
- MD5 363a1b4bf28ad95db5b209b771b12b47
- SHA1 9b0aa7ab01ee2a858f9cf1254cf65f988977fc58
- SHA512 1249da35dfc455cc6854126d439294f1fdff21fe030bab2089df732e756e19cc42cbec9b42525606bc52fe8d067493626bd179d4dd2b6ab1505d0e2472280269
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrgT6yF8j:FBXmkN/+Fhu/Qo4h9L+zNNgB8
- TLSH T142C45C06F283A2F7D42705B0124BF7BF4620F63594129DCBB7989D5AB9339F12A4D362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmpn3baf8q7
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmpn3baf8q7
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmpn3baf8q7
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://aa.hostasa.org/config.rar
-
cdn.cloud2cdn.com:3308
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmpn3baf8q7
- Size 544KB
- SHA256 e157d5c74cf949af2105f513b93bc5f1e745c33d2e8e28aca333c52ec4d0ec11
- MD5 363a1b4bf28ad95db5b209b771b12b47
- SHA1 9b0aa7ab01ee2a858f9cf1254cf65f988977fc58
- SHA512 1249da35dfc455cc6854126d439294f1fdff21fe030bab2089df732e756e19cc42cbec9b42525606bc52fe8d067493626bd179d4dd2b6ab1505d0e2472280269
- SSDEEP 12288:FBXOvdwV1/n/dQFhWlH/c1dHo4h9L+zNZrrgT6yF8j:FBXmkN/+Fhu/Qo4h9L+zNNgB8
- TLSH T142C45C06F283A2F7D42705B0124BF7BF4620F63594129DCBB7989D5AB9339F12A4D362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10