General
- Target tmph9jl9_2d
- Size 647KB
- Sample260602-accheshs9v
- SHA256 c2b9c35d9cf82d758ee678c733f5b180b7eb520e3aeef7c7fef373a537e7f359
- MD5 76b7d3ea85670884d680736ba9321ae2
- SHA1 0adecbd972cf29c6b0f0fe94747a07d7f172a2f4
- SHA512 b435bccd4ca21a769d8b23cc3064762951569087e9c53e514d628149e5b465f51a3bfd0ce73b38132a8205113dd17734538fd9bf97f3b1d2150c51a8b96ac035
- SSDEEP 12288:RBRO1UmJJ0nHgBL9YfJip2qm+x4h1Ton/p6y07l7mtBDvnD/u9hMHDB:RBRpmJ+HyL9AiAqm+x4h1m/6wvnDWXMN
- TLSH T11BE47D06E343EAF7C4570670129BF77B4230E2358412CF8AB6989D1EB9379F56A4E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
tmph9jl9_2d
Resource
win10ltsc2021-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
tmph9jl9_2d
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
tmph9jl9_2d
Resource
win11-20260513-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
xorddos
C2
-
http://info1.3000uc.com/b/u.php
-
aaaaaaaaaa.re67das.com:5859
-
222.187.238.16:2897
-
xiaoji12.top:2897
Attributes
-
crc_polynomial
EDB88320
xor.plain
Targets
-
- Target tmph9jl9_2d
- Size 647KB
- SHA256 c2b9c35d9cf82d758ee678c733f5b180b7eb520e3aeef7c7fef373a537e7f359
- MD5 76b7d3ea85670884d680736ba9321ae2
- SHA1 0adecbd972cf29c6b0f0fe94747a07d7f172a2f4
- SHA512 b435bccd4ca21a769d8b23cc3064762951569087e9c53e514d628149e5b465f51a3bfd0ce73b38132a8205113dd17734538fd9bf97f3b1d2150c51a8b96ac035
- SSDEEP 12288:RBRO1UmJJ0nHgBL9YfJip2qm+x4h1Ton/p6y07l7mtBDvnD/u9hMHDB:RBRpmJ+HyL9AiAqm+x4h1m/6wvnDWXMN
- TLSH T11BE47D06E343EAF7C4570670129BF77B4230E2358412CF8AB6989D1EB9379F56A4E352
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10