General
- Target clp8.exe
- Size 232KB
- Sample260620-akanssdv4y
- SHA256 cc11ed29c8244abc04aa05618154317c550f90a519809849b7cba0aa8badc7c8
- MD5 234ce8b2531070f273ececb213be9366
- SHA1 d626aa5c9870c9281c613d4b064a5a84585958c9
- SHA512 17b480bb5ad790f591aa78c94bcd51c1e0ae9302896658bd7511912d0d9fa171f08517996b39b36a768f4658f8aebc5035019c580488bba95335d997820cd617
- SSDEEP 6144:q0WoKA+vzDrCztDMcwW00M+wbv2dB+c/s/kO:hyzDrCwF+Gv2+1
- TLSH T10E34CF5BB3A034F9D5768278C8145A06E776B8350771DBAF03A043A67F232D19D3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
clp8.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
clp8.exe
Resource
win11ltsc2024-20260618-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
xtinyloader
C2
-
62.60.226.159
Wallets
-
DMhezYpB8cwkowfd8yDLXJc9d4UG58kBoN
-
LZn3xapzEyVf1U8iKJYXY1JudgvHZuBh9e
-
THazR2pvbaHR8NtMXGT3eHSs6wdv8qqtJN
-
0xe28a5e633ef952706996a6da42cba51babb8dc44
-
1Mfq381SMtJm9ir4EjfTycnMn5RVPc3tCZ
Targets
-
- Target clp8.exe
- Size 232KB
- SHA256 cc11ed29c8244abc04aa05618154317c550f90a519809849b7cba0aa8badc7c8
- MD5 234ce8b2531070f273ececb213be9366
- SHA1 d626aa5c9870c9281c613d4b064a5a84585958c9
- SHA512 17b480bb5ad790f591aa78c94bcd51c1e0ae9302896658bd7511912d0d9fa171f08517996b39b36a768f4658f8aebc5035019c580488bba95335d997820cd617
- SSDEEP 6144:q0WoKA+vzDrCztDMcwW00M+wbv2dB+c/s/kO:hyzDrCwF+Gv2+1
- TLSH T10E34CF5BB3A034F9D5768278C8145A06E776B8350771DBAF03A043A67F232D19D3EBA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Executes dropped EXE
-
Adds Run key to start application