General
- Target U1.exe
- Size 11.0MB
- Sample260609-r2t77sb17x
- SHA256 c925d40f07f21bd55de00c498fef9baf6d95e1ed666ff4fc8fce57ee6ef3915c
- MD5 ca71bcf03e10490df2f36a1cf082da98
- SHA1 6344547c6eb9c51a17cfee77b73bdd7428d07dd8
- SHA512 94d630b611d712702c4fe531f0a525befe486e6fd2cd1b132455e5518a316e1fabfdb6d86f5b30a80adba88a9c6151b0c1c27a6135c58af47462538e0bb71656
- SSDEEP 196608:UpoJPz1QUfGYb+zsMRfmB8w2UiewtBHRMN:eUfGYizsMpvw2cOm
- TLSH T113C65A2024D86607FD7ADFBD89DC76540F7AB2953722FE289B4109ED0FD1B49CA025A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
U1.exe
Resource
win10v2004-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral2
Sample
U1.exe
Resource
win10ltsc2021-20260513-en
3 signatures
300 seconds
Behavioral task
behavioral3
Sample
U1.exe
Resource
win11-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target U1.exe
- Size 11.0MB
- SHA256 c925d40f07f21bd55de00c498fef9baf6d95e1ed666ff4fc8fce57ee6ef3915c
- MD5 ca71bcf03e10490df2f36a1cf082da98
- SHA1 6344547c6eb9c51a17cfee77b73bdd7428d07dd8
- SHA512 94d630b611d712702c4fe531f0a525befe486e6fd2cd1b132455e5518a316e1fabfdb6d86f5b30a80adba88a9c6151b0c1c27a6135c58af47462538e0bb71656
- SSDEEP 196608:UpoJPz1QUfGYb+zsMRfmB8w2UiewtBHRMN:eUfGYizsMpvw2cOm
- TLSH T113C65A2024D86607FD7ADFBD89DC76540F7AB2953722FE289B4109ED0FD1B49CA025A3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext