General
- Target Built_Stub.exe
- Size 2.0MB
- Sample260703-plcbcag17z
- SHA256 b76c9825ac1788940f4998fb954101325b7804924a5f3cb2ce7d1e665be4457d
- MD5 ac2b81512c3cb4fe87a6840392c9e331
- SHA1 60fa358cdd37a5c173612a16d65ae970f1cc8de3
- SHA512 5d163659cc236ff62bb6a14954d33714d171392027c8db4bb5423438e9c32e91eb50bc14905ac1c6f7e20bdc4d3a5df18d8b15bd9934b81594ed7944e18e0137
- SSDEEP 24576:s5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOh:gno8haujVsPAB8KY2+Bz+2
- TLSH T1FBA58E46B3A501F8D477C078CD466217FA72B4041774ABEB55A08A6A2F33FE13ABE315
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
Built_Stub.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Built_Stub.exe
Resource
win11ltsc2024-20260629-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Built_Stub.exe
- Size 2.0MB
- SHA256 b76c9825ac1788940f4998fb954101325b7804924a5f3cb2ce7d1e665be4457d
- MD5 ac2b81512c3cb4fe87a6840392c9e331
- SHA1 60fa358cdd37a5c173612a16d65ae970f1cc8de3
- SHA512 5d163659cc236ff62bb6a14954d33714d171392027c8db4bb5423438e9c32e91eb50bc14905ac1c6f7e20bdc4d3a5df18d8b15bd9934b81594ed7944e18e0137
- SSDEEP 24576:s5uYyQO8hVDs/5IdhtQFujoh6m6vBsZZ5PXQBJOKdkjnoor0PfSIgZlHVvtRJQOh:gno8haujVsPAB8KY2+Bz+2
- TLSH T1FBA58E46B3A501F8D477C078CD466217FA72B4041774ABEB55A08A6A2F33FE13ABE315
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory