General
- Target GalaxyClient.exe
- Size 54KB
- Sample260702-cjnkdaaz8y
- SHA256 606d65504b56f254065f94974f430de53d6a9b32e8a1a6f8019cffc6b58c576d
- MD5 6ffe00ed5963bcea2ec0f5c21702a2a5
- SHA1 a31c2cb266b18718eaca79a2cf172045524de181
- SHA512 469d7ebb4dce93d21844023d95d92f616f58b1e85954e937c52aaa3abed1daabd49bbcf96c8ef963a94638f9f55569dd608d94a32339b3a414c40115641cb23a
- SSDEEP 1536:H6kO+nEXpEEm9cQAQ6UXwpBPZban3pBH+Wbd:H7ZEXpExvAQ64aBPZban3pBp
- TLSH T1C4432948B7E84906E1FF5B39B872A1008671F5634934EF0F1ECA509A2A7B7D15910FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GalaxyClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalaxyClient.exe
Resource
win11ltsc2024-20260630-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target GalaxyClient.exe
- Size 54KB
- SHA256 606d65504b56f254065f94974f430de53d6a9b32e8a1a6f8019cffc6b58c576d
- MD5 6ffe00ed5963bcea2ec0f5c21702a2a5
- SHA1 a31c2cb266b18718eaca79a2cf172045524de181
- SHA512 469d7ebb4dce93d21844023d95d92f616f58b1e85954e937c52aaa3abed1daabd49bbcf96c8ef963a94638f9f55569dd608d94a32339b3a414c40115641cb23a
- SSDEEP 1536:H6kO+nEXpEEm9cQAQ6UXwpBPZban3pBH+Wbd:H7ZEXpExvAQ64aBPZban3pBp
- TLSH T1C4432948B7E84906E1FF5B39B872A1008671F5634934EF0F1ECA509A2A7B7D15910FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.