General
- Target InternalBase.dll
- Size 11.0MB
- Sample260624-vhn4madx5z
- SHA256 dd59748591db5a34fa62a8a9aa98992b39c4d407729eb0c1212fe324e19a9bb3
- MD5 ee5d5b5939ef3db4e6e4f440e4e0b10a
- SHA1 76f9a1c2a2d554d1aa8f4accc97509ddb710fa3a
- SHA512 4ddb8610bd691c90fcd025371cafac916f1362498103887b05a775340bb98ff085fbd0f862c7b21699fd5dc15b316e5a9dc83ca8edc17e60765f161d15ed7757
- SSDEEP 196608:SILrHAm8uKxtfEVqkwdmHJnPAY2hxM3eo2mk5YoY8Fx3lEA:xrHQu2f7ZdmHJPI4SfYV8FdlEA
- TLSH T1E4C6BF46F5838F3FC12A1A3184D39F5B9674F484AF314E1333986B2D6E973A45A93389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
InternalBase.dll
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
InternalBase.dll
Resource
win11ltsc2024-20260617-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target InternalBase.dll
- Size 11.0MB
- SHA256 dd59748591db5a34fa62a8a9aa98992b39c4d407729eb0c1212fe324e19a9bb3
- MD5 ee5d5b5939ef3db4e6e4f440e4e0b10a
- SHA1 76f9a1c2a2d554d1aa8f4accc97509ddb710fa3a
- SHA512 4ddb8610bd691c90fcd025371cafac916f1362498103887b05a775340bb98ff085fbd0f862c7b21699fd5dc15b316e5a9dc83ca8edc17e60765f161d15ed7757
- SSDEEP 196608:SILrHAm8uKxtfEVqkwdmHJnPAY2hxM3eo2mk5YoY8Fx3lEA:xrHQu2f7ZdmHJPI4SfYV8FdlEA
- TLSH T1E4C6BF46F5838F3FC12A1A3184D39F5B9674F484AF314E1333986B2D6E973A45A93389
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.