General
- Target WinMFC.exe
- Size 3.1MB
- Sample260701-269hssfx2m
- SHA256 d4cb44d2927e58dbc12c9f513fdf3c06b76b82d69e0f52b4e4a5cf4b9d4e4592
- MD5 589096c6028c57516115bc0d4368d1fb
- SHA1 3150a8d1b5a8c6682002ddd0c302c8e6c66bf260
- SHA512 689743600499c71e39e10342db807fee6b65ac444dd39aa7960f72ffa7763bbe24ec3d89d3578922c2fdc314e97191a7b9b51e7ac80b0fa9ef05d6b66a39298b
- SSDEEP 49152:UJqjxaH2fr5GfJRy/S45Wdfh9tuc+qdMgAB7jAtfTStegmDQUl+FA2O92:pS6WdZ9cc+qdUhjw0egmEWg
- TLSH T127E5CF127AE1D226DA67023DCD7CA6F9626DBC50CFA085DB6388BF7D39301C10A35A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WinMFC.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
WinMFC.exe
Resource
win11ltsc2024-20260630-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target WinMFC.exe
- Size 3.1MB
- SHA256 d4cb44d2927e58dbc12c9f513fdf3c06b76b82d69e0f52b4e4a5cf4b9d4e4592
- MD5 589096c6028c57516115bc0d4368d1fb
- SHA1 3150a8d1b5a8c6682002ddd0c302c8e6c66bf260
- SHA512 689743600499c71e39e10342db807fee6b65ac444dd39aa7960f72ffa7763bbe24ec3d89d3578922c2fdc314e97191a7b9b51e7ac80b0fa9ef05d6b66a39298b
- SSDEEP 49152:UJqjxaH2fr5GfJRy/S45Wdfh9tuc+qdMgAB7jAtfTStegmDQUl+FA2O92:pS6WdZ9cc+qdUhjw0egmEWg
- TLSH T127E5CF127AE1D226DA67023DCD7CA6F9626DBC50CFA085DB6388BF7D39301C10A35A57
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.