General
- Target GalaxyClisent.exe
- Size 56KB
- Sample260704-nfv1tsaw8m
- SHA256 5e05be74f10b03a4ee4332ea0e9de050e9bea79e929f9123ca42d540b08c4466
- MD5 f281db7ec70cce558512462e0d757c45
- SHA1 1bf2ee9cd349fb0a9362a13722c0122c8ebe9c01
- SHA512 bb24dfb546b28d9380393e1204d6d77be0fed5e7251ab71e21a3aca4e442250f417fe0226faa4f8ca51fa0b100afab6d0fb5a44df54702e0a99d38b6ab79766e
- SSDEEP 1536:GHzaaCWZWydZsCJSmtDQabxJQOpRH+WIA:gz3dZsuSqDQabxJQOpRwA
- TLSH T140432A49B3AD4D5AF0FE5B39BAB261058631F4635D30EF0E1ED940DA19BA7804901FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GalaxyClisent.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalaxyClisent.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target GalaxyClisent.exe
- Size 56KB
- SHA256 5e05be74f10b03a4ee4332ea0e9de050e9bea79e929f9123ca42d540b08c4466
- MD5 f281db7ec70cce558512462e0d757c45
- SHA1 1bf2ee9cd349fb0a9362a13722c0122c8ebe9c01
- SHA512 bb24dfb546b28d9380393e1204d6d77be0fed5e7251ab71e21a3aca4e442250f417fe0226faa4f8ca51fa0b100afab6d0fb5a44df54702e0a99d38b6ab79766e
- SSDEEP 1536:GHzaaCWZWydZsCJSmtDQabxJQOpRH+WIA:gz3dZsuSqDQabxJQOpRwA
- TLSH T140432A49B3AD4D5AF0FE5B39BAB261058631F4635D30EF0E1ED940DA19BA7804901FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.