General
- Target Loader (1).exe
- Size 4.1MB
- Sample260629-tvsf5shx2v
- SHA256 eea7960fa2896808b9bf85bd4da4386c679f58b8644d00c573fc7cfca43d1b58
- MD5 e4cd48d2df999bb60055b48e1f77b54c
- SHA1 e1be07966791129451caad1748d7e0220fc7fe3c
- SHA512 e98998184df375a6b26b7d09fd82a758edb7c7afa43c10e7590b4475b05c44b10a4ccc6af825474f74ca70a9c2718f512037b6c3d2157807aa2784fa4b2d686b
- SSDEEP 49152:LNAPeZBtX+fe2YGyE+Fzw1/ErNkGL8Er2LqnpuqxNUqcTXRG8jQUqcTn32:JzHIMLwLZph7G
- TLSH T15F16AF82B3E94449DA23F5788B42590BE2713864432142F77FDA499D8E7A8F0CB7EF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Loader (1).exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
Loader (1).exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Loader (1).exe
- Size 4.1MB
- SHA256 eea7960fa2896808b9bf85bd4da4386c679f58b8644d00c573fc7cfca43d1b58
- MD5 e4cd48d2df999bb60055b48e1f77b54c
- SHA1 e1be07966791129451caad1748d7e0220fc7fe3c
- SHA512 e98998184df375a6b26b7d09fd82a758edb7c7afa43c10e7590b4475b05c44b10a4ccc6af825474f74ca70a9c2718f512037b6c3d2157807aa2784fa4b2d686b
- SSDEEP 49152:LNAPeZBtX+fe2YGyE+Fzw1/ErNkGL8Er2LqnpuqxNUqcTXRG8jQUqcTn32:JzHIMLwLZph7G
- TLSH T15F16AF82B3E94449DA23F5788B42590BE2713864432142F77FDA499D8E7A8F0CB7EF51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.