General
- Target VALocker.exe
- Size 42.0MB
- Sample260619-sbe62aas8w
- SHA256 32cadaa99b05247746cfe8a8d8fa65f37179357cfda6218ec2fb53d57c0f935c
- MD5 e851e4792e379a2024d1f3cfefa9b6b1
- SHA1 c2fe104c9a0b2525f411593974aaa4d878c696a0
- SHA512 a47aa1c8daabb5cefb08fa2fb4f7f997634dbdbadaafe68e31f074531b7bcfebae7d568c8c4218c7557406893c0388f60471b39537573952b03a2519b9212bb8
- SSDEEP 786432:YIQtsEW8XCZ0Maw2j6+s7LWB75zuXVg65F05HSTpJiTpJx2uy/DK/m13fW:JQtTWvyMaw2qHWB75ilTzlTfiTfx2uya
- TLSH T1D6A7335DA76708B6E58E7435E0A085321293387602F1F18B8BF81D550DAF4EBEF79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
VALocker.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
VALocker.exe
Resource
win11ltsc2024-20260617-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target VALocker.exe
- Size 42.0MB
- SHA256 32cadaa99b05247746cfe8a8d8fa65f37179357cfda6218ec2fb53d57c0f935c
- MD5 e851e4792e379a2024d1f3cfefa9b6b1
- SHA1 c2fe104c9a0b2525f411593974aaa4d878c696a0
- SHA512 a47aa1c8daabb5cefb08fa2fb4f7f997634dbdbadaafe68e31f074531b7bcfebae7d568c8c4218c7557406893c0388f60471b39537573952b03a2519b9212bb8
- SSDEEP 786432:YIQtsEW8XCZ0Maw2j6+s7LWB75zuXVg65F05HSTpJiTpJx2uy/DK/m13fW:JQtTWvyMaw2qHWB75ilTzlTfiTfx2uya
- TLSH T1D6A7335DA76708B6E58E7435E0A085321293387602F1F18B8BF81D550DAF4EBEF79B60
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.