General
- Target azp2tkx0fgfdlvzx.exe
- Size 401KB
- Sample260706-nc52maas6q
- SHA256 d1fb371eecf06e2990df016908cf7182fc9431e02791a1d2bcbce65642ff546c
- MD5 ea8d367b75531e666623f611a94e1467
- SHA1 1c538db98ce0912ba1dc88e94b17a98204bd6983
- SHA512 a3a9b93227e3530e90feffbca50f00fe71db17ad90ae67f27311bba7300a7425e6253f2cbe500dd13e49a323cb6dc4c09466a0e335adb7762a8c95818cee0165
- SSDEEP 6144:saweX2AcvYJlIFUZq2aqs/MOasq8e9qmClfsLfqdCBMbtIdF8Qgj43/5H6TEb:zr2sJHsqekLFB1uQgOt6T4
- TLSH T17794E9147F988608E5802A7E458E1A11D7EE91F225327303370AEF615D89DDEDE2D3EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
azp2tkx0fgfdlvzx.exe
Resource
win11-20260513-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target azp2tkx0fgfdlvzx.exe
- Size 401KB
- SHA256 d1fb371eecf06e2990df016908cf7182fc9431e02791a1d2bcbce65642ff546c
- MD5 ea8d367b75531e666623f611a94e1467
- SHA1 1c538db98ce0912ba1dc88e94b17a98204bd6983
- SHA512 a3a9b93227e3530e90feffbca50f00fe71db17ad90ae67f27311bba7300a7425e6253f2cbe500dd13e49a323cb6dc4c09466a0e335adb7762a8c95818cee0165
- SSDEEP 6144:saweX2AcvYJlIFUZq2aqs/MOasq8e9qmClfsLfqdCBMbtIdF8Qgj43/5H6TEb:zr2sJHsqekLFB1uQgOt6T4
- TLSH T17794E9147F988608E5802A7E458E1A11D7EE91F225327303370AEF615D89DDEDE2D3EB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Modifies WinLogon for persistence
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.