General
- Target RisenwareBloodstrike.exe
- Size 1.7MB
- Sample260702-vdepdsft3l
- SHA256 b9e4020f5968e8ff1b53add888e0be36adaf07556466ef9c126d23447b09e2a0
- MD5 cf8fddafe68d54384776aea17d8a3f41
- SHA1 a12456c977d92c78a65e1e08d898dd5329bbfc6e
- SHA512 16fefcabda6ab4e37b54fd2c77ec70d98e78b51dc471b5300e336fa44ccede7220adea30f0c9742494a9a4796ecab8a8bfcb2c1bc36855b267ead74f381329eb
- SSDEEP 24576:Y8sKnytZ2lMrcKRPObrD2whd/qUxuW/w/ZXCmL10I:Bx6Z73OfDvP/qA7SCmLKI
- TLSH T18985AF12E76102ECC26BC178CA528B0BF771780513249BDF26E05A666F27BF05FBA751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RisenwareBloodstrike.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
RisenwareBloodstrike.exe
Resource
win11ltsc2024-20260629-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target RisenwareBloodstrike.exe
- Size 1.7MB
- SHA256 b9e4020f5968e8ff1b53add888e0be36adaf07556466ef9c126d23447b09e2a0
- MD5 cf8fddafe68d54384776aea17d8a3f41
- SHA1 a12456c977d92c78a65e1e08d898dd5329bbfc6e
- SHA512 16fefcabda6ab4e37b54fd2c77ec70d98e78b51dc471b5300e336fa44ccede7220adea30f0c9742494a9a4796ecab8a8bfcb2c1bc36855b267ead74f381329eb
- SSDEEP 24576:Y8sKnytZ2lMrcKRPObrD2whd/qUxuW/w/ZXCmL10I:Bx6Z73OfDvP/qA7SCmLKI
- TLSH T18985AF12E76102ECC26BC178CA528B0BF771780513249BDF26E05A666F27BF05FBA751
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.