Analysis
- max time kernel
148s - max time network
144s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260618-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
23/06/2026, 14:19
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
_d90029e3093c6d6fe92901b362ce1f95b0b50c2bd3e068573e000f18e890d7d4.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
_d90029e3093c6d6fe92901b362ce1f95b0b50c2bd3e068573e000f18e890d7d4.exe
Resource
win11ltsc2024-20260618-en
2 signatures
150 seconds
General
- Target _d90029e3093c6d6fe92901b362ce1f95b0b50c2bd3e068573e000f18e890d7d4.exe
- Size 133KB
- Sample260623-rnalmsdv5m
- SHA256 d90029e3093c6d6fe92901b362ce1f95b0b50c2bd3e068573e000f18e890d7d4
- MD5 67fcbd3d193028d3ce33652f172a9d56
- SHA1 218812955f6a07d6da4b79be768633b03d0c919d
- SHA512 801802401a44b14bd87b3f311878c6722a90e5ede74ca12792a3cd3f82c4b78f6f1f4e5ca822406a14ed523a9b3dac19ba0401b8ad49e735fbba2145087a522a
- SSDEEP 1536:98B2x0DtnWYWkIz7VsVwDO+FhgqU1ZnexXY8VlgUBeJ7RkUcr9+sFq2WJiYyxxAy:9yDtSsVNt8xXYSO5cr9+spYoWHaK8Hq
- TLSH T116D35B2AFA5950B5D2A6C5B8CA434906EFB37C55075167CF23D04EF60E27AE0AE3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 3 discord.com 1 discord.com - Looks up external IP address via web service 2 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 1 api.ipify.org 2 api.ipify.org