General
- Target BacteriaClient_HailHydra.exe
- Size 659KB
- Sample260626-sbrvtscs81
- SHA256 e2c408607b4d007de09ba5ef415d6a1d08cf2f628d2361563f919026a563d5ef
- MD5 4856ce9ba8f2b2e2abaa6779635f168b
- SHA1 5369d32ee2981656c5f2cb81837a502987dfd171
- SHA512 3e127c1de0ddce1cc5b45c59f3cfa6625cb502961d77c53fca0c467b70b09ae86202a35cbaee80d133378c1d6d53a42a66aa7e1350f37ad5e145564efc16dc0f
- SSDEEP 12288:99/dWRDBi5S3KHYcERkRiOBJlecILwDTMoRw11S1CB1t1EDc+c0b3iYxhRnsMMTQ:99/8RoQkEIJHIsCoCB1t1ELNzxrkg1
- TLSH T1EDE40203B9C8D206E5BE393960D69621973AF1C30776EE0C9F44837AA9635967C0CF5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
BacteriaClient_HailHydra.exe
Resource
win10v2004-20260513-en
4 signatures
30 seconds
Behavioral task
behavioral2
Sample
BacteriaClient_HailHydra.exe
Resource
win11ltsc2024-20260617-en
4 signatures
30 seconds
Malware Config
Targets
-
- Target BacteriaClient_HailHydra.exe
- Size 659KB
- SHA256 e2c408607b4d007de09ba5ef415d6a1d08cf2f628d2361563f919026a563d5ef
- MD5 4856ce9ba8f2b2e2abaa6779635f168b
- SHA1 5369d32ee2981656c5f2cb81837a502987dfd171
- SHA512 3e127c1de0ddce1cc5b45c59f3cfa6625cb502961d77c53fca0c467b70b09ae86202a35cbaee80d133378c1d6d53a42a66aa7e1350f37ad5e145564efc16dc0f
- SSDEEP 12288:99/dWRDBi5S3KHYcERkRiOBJlecILwDTMoRw11S1CB1t1EDc+c0b3iYxhRnsMMTQ:99/8RoQkEIJHIsCoCB1t1ELNzxrkg1
- TLSH T1EDE40203B9C8D206E5BE393960D69621973AF1C30776EE0C9F44837AA9635967C0CF5E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger