General
- Target TadicTools (2).exe
- Size 19.0MB
- Sample260622-12pgdsg14w
- SHA256 b40df895d56f84f605dc7fa93b6d58d6fa08d2ca1d673eca96834c1ca8b59ace
- MD5 2978ba68bdbf17b2893133569580e16b
- SHA1 67e9f1fe9e3eb9698980e96647994414777fe88b
- SHA512 95748f5d32bf9c2b7ece8c3a62616f84af1268f1df05adb6b0fd8917910a09a3510d2c8bcba1a058d4dd78946a0895d3b7a1023f87b63f3096f79712a4b32f7e
- SSDEEP 393216:NvW88y+I/yr76hdZTuCBU3hHTodRGkXE9v9XpLfeAapaCpdokn:RW88yfa7KZKCu0LhXg7mpOk
- TLSH T1D1173367B38504F4FA9BB27C6492421277A9B8640731C1DB07ED8D625DBB0F8EE31762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
TadicTools (2).exe
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Behavioral task
behavioral2
Sample
TadicTools (2).exe
Resource
win11ltsc2024-20260618-en
4 signatures
300 seconds
Malware Config
Targets
-
- Target TadicTools (2).exe
- Size 19.0MB
- SHA256 b40df895d56f84f605dc7fa93b6d58d6fa08d2ca1d673eca96834c1ca8b59ace
- MD5 2978ba68bdbf17b2893133569580e16b
- SHA1 67e9f1fe9e3eb9698980e96647994414777fe88b
- SHA512 95748f5d32bf9c2b7ece8c3a62616f84af1268f1df05adb6b0fd8917910a09a3510d2c8bcba1a058d4dd78946a0895d3b7a1023f87b63f3096f79712a4b32f7e
- SSDEEP 393216:NvW88y+I/yr76hdZTuCBU3hHTodRGkXE9v9XpLfeAapaCpdokn:RW88yfa7KZKCu0LhXg7mpOk
- TLSH T1D1173367B38504F4FA9BB27C6492421277A9B8640731C1DB07ED8D625DBB0F8EE31762
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.