General
- Target Any-Go-Business-v3.0.zip
- Size 570KB
- Sample260629-frdxpaez2n
- SHA256 18e86b003d514560cf7278e676048f8002527eb922b618c82c6261565bd290a3
- MD5 e02a494cd0cdc410d8c64b9c8a1d4626
- SHA1 93fcd3780f7f2cc6437aa702766bd4fb399e4606
- SHA512 819ca85daa21682a687b9f5ec6b0a3154790d63618469127a014342ec870a3be109e21eba4adbe919e2bd0e6dd775af91c0c6bb01244913dc79b134ce45282bc
- SSDEEP 12288:L6wlOMWROC/FTeHo22Qm7NzofOr68mXeA924EwCB:z4MQOC/gHozN7NzomW89A9C
- TLSH T139C42304340741D5835A2B1EAEC4E6E0BEB560DBFA1CF940AADD7ED06DE92A177C1837
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Application.cmd
Resource
win10v2004-20260513-en
6 signatures
60 seconds
Malware Config
Targets
-
- Target Application.cmd
- Size 29B
- SHA256 7e8bd9ba64fcbd1cb753baa2f7bc8d5d7f3e91552bcdc9ec1ec04edd4916ff33
- MD5 5422fc71d463c77d30bcda71798a74db
- SHA1 26b77b33954bac81d5f0bab8d045f5489f622f2f
- SHA512 d3d94edc59e609ea97bd5162e823fd28ac2a5bc4cb920ab93107bf9855d44a6a1cf3046f9b154d9d1c1c0651bd751a95a9a0ffeec89d3d8776b56e946d65c246
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.