General
- Target Loader.exe
- Size 4.4MB
- Sample260606-yn95tscv2n
- SHA256 dd1fdf8b1200b9bb54b94bbeb5d496eaa7d5b2a3f5bc9bfe57bf6bd875101b81
- MD5 9d26ad0b6083af6205d6dee861d8fc8c
- SHA1 d8c2fbe09500094fb8fb671d2dd3f417836d574d
- SHA512 dceb4d7c6c44bd7a00b58e1111210ebe0abc198afa2df692d9d1e2ac75083348877d6f05bb0aa3854e3e8ab2d7b5e5187021d5286fd90748082c8635d381b8c6
- SSDEEP 49152:wssfmK6qVfRn1sdrVJPjmEWDZ+JCJ8eBwykKZzZH8lUhaHXMFcaErNkrLkEr2LHy:8OHE93wykKZzZH8lUha3MFVL4LkpN
- TLSH T17026BF9273E94459DA23E13886465A0BE3717898032182F77FD549AD8F7B9E0CB3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader.exe
Resource
win10v2004-20260513-en
14 signatures
60 seconds
Behavioral task
behavioral2
Sample
Loader.exe
Resource
win11-20260513-en
4 signatures
60 seconds
Malware Config
Targets
-
- Target Loader.exe
- Size 4.4MB
- SHA256 dd1fdf8b1200b9bb54b94bbeb5d496eaa7d5b2a3f5bc9bfe57bf6bd875101b81
- MD5 9d26ad0b6083af6205d6dee861d8fc8c
- SHA1 d8c2fbe09500094fb8fb671d2dd3f417836d574d
- SHA512 dceb4d7c6c44bd7a00b58e1111210ebe0abc198afa2df692d9d1e2ac75083348877d6f05bb0aa3854e3e8ab2d7b5e5187021d5286fd90748082c8635d381b8c6
- SSDEEP 49152:wssfmK6qVfRn1sdrVJPjmEWDZ+JCJ8eBwykKZzZH8lUhaHXMFcaErNkrLkEr2LHy:8OHE93wykKZzZH8lUha3MFVL4LkpN
- TLSH T17026BF9273E94459DA23E13886465A0BE3717898032182F77FD549AD8F7B9E0CB3EF11
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.