General
- Target GalaxyClient.exe
- Size 54KB
- Sample260704-ngp6zaew71
- SHA256 68123a38870dcac9c232810f435a6c7359dc03bffb0291954265eb2ae977bf13
- MD5 2c3a2b9626b60fae061313087de21ff3
- SHA1 195b27eac899e8bcbaa338c0e270a249dee725ce
- SHA512 6c3bfee3f6776deb179f1d024c9b47865aaffa3071435505d5986ef429e46008e1ee0038a990ff18256b6ec76fc351720f2663a9da8eb410c76bc366c72737d1
- SSDEEP 1536:faJeT3P5YRoM1GQ6UXwpBPZbaj3pBH+WbF:fuIP5YRfGQ64aBPZbaj3pBB
- TLSH T134433A48B7E84906E0FE5B39F872A1108671F4674930EF0F1EC9509A2A7BBC15911FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
GalaxyClient.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
GalaxyClient.exe
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target GalaxyClient.exe
- Size 54KB
- SHA256 68123a38870dcac9c232810f435a6c7359dc03bffb0291954265eb2ae977bf13
- MD5 2c3a2b9626b60fae061313087de21ff3
- SHA1 195b27eac899e8bcbaa338c0e270a249dee725ce
- SHA512 6c3bfee3f6776deb179f1d024c9b47865aaffa3071435505d5986ef429e46008e1ee0038a990ff18256b6ec76fc351720f2663a9da8eb410c76bc366c72737d1
- SSDEEP 1536:faJeT3P5YRoM1GQ6UXwpBPZbaj3pBH+WbF:fuIP5YRfGQ64aBPZbaj3pBB
- TLSH T134433A48B7E84906E0FE5B39F872A1108671F4674930EF0F1EC9509A2A7BBC15911FEB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.