General
- Target SoD2_PL_TOOLS.rar
- Size 7.1MB
- Sample260701-1calyaey9k
- SHA256 74508d212dd22ff3f98f7b87caf4777bbd146e7e8751b924799660df751d831d
- MD5 c14ce793559360a2525af44316e20c04
- SHA1 f68a12f448fae24c46d6a7d511d1bf7ed7430b29
- SHA512 1c0a7c35f88f6c6281edf7d1451bf07776d1f4a38272521462c55ba6e6a401315d8a54befdfbd89fbe0f0afe4d4ddecb90bf35daa479f735469a5a6b0d96d75e
- SSDEEP 196608:PTTx87ZIt+u13184yyfMcNax6gkcken3EN2doGzyFoqg6:bTT7F8t6yxkcP3y2Tqg6
- TLSH T17E76339245732A552B38DD86F9944A90DB90339FA354E2B7CE54CDA22E3FEEC400791F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SoD2_PL_TOOLS.rar
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
SoD2_PL_TOOLS.rar
Resource
win11ltsc2024-20260629-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target SoD2_PL_TOOLS.rar
- Size 7.1MB
- SHA256 74508d212dd22ff3f98f7b87caf4777bbd146e7e8751b924799660df751d831d
- MD5 c14ce793559360a2525af44316e20c04
- SHA1 f68a12f448fae24c46d6a7d511d1bf7ed7430b29
- SHA512 1c0a7c35f88f6c6281edf7d1451bf07776d1f4a38272521462c55ba6e6a401315d8a54befdfbd89fbe0f0afe4d4ddecb90bf35daa479f735469a5a6b0d96d75e
- SSDEEP 196608:PTTx87ZIt+u13184yyfMcNax6gkcken3EN2doGzyFoqg6:bTT7F8t6yxkcP3y2Tqg6
- TLSH T17E76339245732A552B38DD86F9944A90DB90339FA354E2B7CE54CDA22E3FEEC400791F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.