Analysis
- max time kernel
149s - max time network
150s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
07/06/2026, 12:12
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
kolodial.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
kolodial.exe
Resource
win11-20260513-en
1 signatures
150 seconds
General
- Target kolodial.exe
- Size 2.0MB
- Sample260607-pc8m7aex4w
- SHA256 d6802fce5b918ed247ba85d6aa0545a8120cfbc3734b1c37794c4e381862d4ee
- MD5 e8b080c276519547e95930ab15028adb
- SHA1 4557478c9b47f5d0729b6f6bf21d673068b57126
- SHA512 4f5320218c0100379ddf8bcce4280231cda0b17e0deb0794abd0103ef4cd74120ca842f180ed3f7cf1a982ada8f9739d8db7163fa0dbd9c1943f2530b6abd6d2
- SSDEEP 24576:MAbGrci1CVsb+JPrf+xp8esqhNyjAibJULb1hstRqGG7srGX8vCWI7JgZlHavtdP:VN7Jjfa87S1LktRqVzfHXxQk
- TLSH T1E3958E46B3A501FCD467C178CD466217F672B4041774ABEF45A08A6A2F73BE23A7E318
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 3 ip-api.com