General
- Target FuckVacAgain.dll
- Size 2.1MB
- Sample260706-2l4f2sh14m
- SHA256 af02612545e4f84920bad38b9fe5ec6c60d6bce656931afe215e42821eb6d319
- MD5 466be4079e228e25f9d443df728cc0b7
- SHA1 16ca585ddbe423d85fcfcb0e147ea3530e91d4f0
- SHA512 15272ffde44d6432f498d36199ebb2b6a8f93b62ce66822728a97cebc2056f5ef1562672b780f95e00c86a02b39e1eb8acd565777a3ffdbc76da7968432c751b
- SSDEEP 49152:46Vle7nD0RXAv/JedzLrDx5YKcNDAtjIEx6WdIny0V++:rCURSxedXodNkfx6WEi+
- TLSH T115A52255F9D29B78C5F2823417C341B0B08B24144CAA9FABF6FA9A017C72C9E624775F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
FuckVacAgain.dll
Resource
win10v2004-20260513-en
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
FuckVacAgain.dll
Resource
win11ltsc2024-20260706-en
20 signatures
600 seconds
Malware Config
Targets
-
- Target FuckVacAgain.dll
- Size 2.1MB
- SHA256 af02612545e4f84920bad38b9fe5ec6c60d6bce656931afe215e42821eb6d319
- MD5 466be4079e228e25f9d443df728cc0b7
- SHA1 16ca585ddbe423d85fcfcb0e147ea3530e91d4f0
- SHA512 15272ffde44d6432f498d36199ebb2b6a8f93b62ce66822728a97cebc2056f5ef1562672b780f95e00c86a02b39e1eb8acd565777a3ffdbc76da7968432c751b
- SSDEEP 49152:46Vle7nD0RXAv/JedzLrDx5YKcNDAtjIEx6WdIny0V++:rCURSxedXodNkfx6WEi+
- TLSH T115A52255F9D29B78C5F2823417C341B0B08B24144CAA9FABF6FA9A017C72C9E624775F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)