General
- Target Loader.exe
- Size 3.3MB
- Sample260604-v3nnlabv21
- SHA256 8c99af5e032ba20d7c1cf20079ba1b01b8d50a7bac2e642319aed69946267f22
- MD5 be2c3e8dd86998342d5a303982249a6d
- SHA1 1651f55618ef398ca8012e6b2d6ede843070b6b3
- SHA512 3378c48010487b2539d5da9cf361f767b3bd5e5067ec7c452af602f697a97245ed5360fe2d64763912c994cc771f73a70372a509df31c96bb0eb4d52378ffae9
- SSDEEP 49152:WRTQrCCxyfW1Kj1l2Oa4l4YZKzCcQSOO4yrmGY/anXl/5denApFmrhLGLqn3neom:tOCA7/anXl/5denApFmlLGLfp
- TLSH T1B7F5BF45B2A540E8DF77D138C9469A13E6713CC8033197EB27E48AA61F336F15A7EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win11-20260513-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 3.3MB
- SHA256 8c99af5e032ba20d7c1cf20079ba1b01b8d50a7bac2e642319aed69946267f22
- MD5 be2c3e8dd86998342d5a303982249a6d
- SHA1 1651f55618ef398ca8012e6b2d6ede843070b6b3
- SHA512 3378c48010487b2539d5da9cf361f767b3bd5e5067ec7c452af602f697a97245ed5360fe2d64763912c994cc771f73a70372a509df31c96bb0eb4d52378ffae9
- SSDEEP 49152:WRTQrCCxyfW1Kj1l2Oa4l4YZKzCcQSOO4yrmGY/anXl/5denApFmrhLGLqn3neom:tOCA7/anXl/5denApFmlLGLfp
- TLSH T1B7F5BF45B2A540E8DF77D138C9469A13E6713CC8033197EB27E48AA61F336F15A7EB12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.