General
- Target multi tool.exe
- Size 21.3MB
- Sample260629-dz82padt7k
- SHA256 f30c6896adc5c94bb36a3b2e706d5c2b746ad89f4d22286dfc2cb52821b1e2ea
- MD5 27204000b3666810e94d9d98190b2021
- SHA1 7bd8e8c52c23bf36054f1947cc06004fa56000af
- SHA512 4e2a71638a005ec7ef3ab17880143d936606acd643be856aae85fd7feddd13ddc38e379dc75027eea492caf4bb7b91f2a6be0f980412f968ad06023cc05897c0
- SSDEEP 393216:dowYMVVRkMdhi5PxfcFeUg6vOFGEx/hCWbdXQfM6R4RmhMhHsnMqDwxE3o2l02dX:KwrhiJx6eU5GFGExXYMc3M1gMdxD2l0w
- TLSH T13B2733A85666257FE8C2A03A59B5C337F3B0BA604782C59B0B780F233E635E55C7F254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
multi tool.exe
Resource
win10ltsc2021-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
multi tool.exe
Resource
win11ltsc2024-20260618-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target multi tool.exe
- Size 21.3MB
- SHA256 f30c6896adc5c94bb36a3b2e706d5c2b746ad89f4d22286dfc2cb52821b1e2ea
- MD5 27204000b3666810e94d9d98190b2021
- SHA1 7bd8e8c52c23bf36054f1947cc06004fa56000af
- SHA512 4e2a71638a005ec7ef3ab17880143d936606acd643be856aae85fd7feddd13ddc38e379dc75027eea492caf4bb7b91f2a6be0f980412f968ad06023cc05897c0
- SSDEEP 393216:dowYMVVRkMdhi5PxfcFeUg6vOFGEx/hCWbdXQfM6R4RmhMhHsnMqDwxE3o2l02dX:KwrhiJx6eU5GFGExXYMc3M1gMdxD2l0w
- TLSH T13B2733A85666257FE8C2A03A59B5C337F3B0BA604782C59B0B780F233E635E55C7F254
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Loads dropped DLL
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.