General
- Target _b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075.exe
- Size 148KB
- Sample260710-y8c1tsbs5v
- SHA256 b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075
- MD5 16307d047efe925e8c34064306948541
- SHA1 56fa917487e7a2aee0b8327774cc99c6a9b86651
- SHA512 582a1e8afc004a551692ec86db96e7cfb19a332f9fb4dd20c21e5ff1197372aaa987bbd24b210d8098f568e88184d0701096cd06109df2f9502a31fdcfc66295
- SSDEEP 3072:2L+xFSlh/WjgRGGs1tsNA1m8omzdZfwcMorHShKLBUpFUJKHclbafkj54J:GqSv+jgYT/s6MmzffwPIyhKWmAIyJ
- TLSH T1AEE37C21B1C1C0B3C8B6253158F4EE759A3DF9701F245DDB63980AB99F302D29B39A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
_b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
_b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075.exe
Resource
win11ltsc2024-20260710-en
5 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
103.75.46.34:10801
-
127.0.0.1:10801
Attributes
-
campaign_date
2026. 7. 6
Targets
-
- Target _b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075.exe
- Size 148KB
- SHA256 b3369a20d7c603b4d1078010b008a9db1b49dccf694a05e6bd49ede2762a8075
- MD5 16307d047efe925e8c34064306948541
- SHA1 56fa917487e7a2aee0b8327774cc99c6a9b86651
- SHA512 582a1e8afc004a551692ec86db96e7cfb19a332f9fb4dd20c21e5ff1197372aaa987bbd24b210d8098f568e88184d0701096cd06109df2f9502a31fdcfc66295
- SSDEEP 3072:2L+xFSlh/WjgRGGs1tsNA1m8omzdZfwcMorHShKLBUpFUJKHclbafkj54J:GqSv+jgYT/s6MmzffwPIyhKWmAIyJ
- TLSH T1AEE37C21B1C1C0B3C8B6253158F4EE759A3DF9701F245DDB63980AB99F302D29B39A67
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.