General
- Target upx_external_Slayed.exe
- Size 605KB
- Sample260709-3edgqaax7k
- SHA256 32c5a60b035eb60ac2f3987861715adc45e6a7bcba503e67389bbdf183c6ae29
- MD5 7628b36704c9b63e4a0e411598c54c08
- SHA1 e5c792de41c9bf86ffda6207e7b3fdffd598350b
- SHA512 2093da413980fdfa3cbe13367fa67431ffdbe5330c4e34397f1b7d3031dfa891829904be1739e6bbe18b81a351b3903f9cdc98297b661bd1c9a035dd609076cc
- SSDEEP 12288:HnC08iKbtKaKi6ZYxeZHYhfUYqjz+tJ+jHRMUX:HRKbwiTQZ45rqf+gxME
- TLSH T162D42375C9749134E05FA3F22B27F6B58F4982D38813AF2D1E068B924516A8F5EB05F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
upx_external_Slayed.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
upx_external_Slayed.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target upx_external_Slayed.exe
- Size 605KB
- SHA256 32c5a60b035eb60ac2f3987861715adc45e6a7bcba503e67389bbdf183c6ae29
- MD5 7628b36704c9b63e4a0e411598c54c08
- SHA1 e5c792de41c9bf86ffda6207e7b3fdffd598350b
- SHA512 2093da413980fdfa3cbe13367fa67431ffdbe5330c4e34397f1b7d3031dfa891829904be1739e6bbe18b81a351b3903f9cdc98297b661bd1c9a035dd609076cc
- SSDEEP 12288:HnC08iKbtKaKi6ZYxeZHYhfUYqjz+tJ+jHRMUX:HRKbwiTQZ45rqf+gxME
- TLSH T162D42375C9749134E05FA3F22B27F6B58F4982D38813AF2D1E068B924516A8F5EB05F8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.