General
- Target 968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd
- Size 6.1MB
- Sample260712-dnbbaact4p
- SHA256 968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd
- MD5 fe731a7b7ef7920cfe1288a9f00e5064
- SHA1 afca0b03c20a762b1d5960f01ace92471ac1e4a7
- SHA512 d922f7aea126be737cbbce2b3c6a15e43d5af4275da868eb7a7c4b72e6c18b86c388c1c704d1a85d687a871612342d66c26f49e059ba5ca210abb448faed6d57
- SSDEEP 98304:S0a7S1evKNmlIcv2mtkFQMqUzhq70SIMUke3H7iWuPHWnvwLufuu9uuQuuuRBuuY:Sk1eemlIWMqUsA3bIqF
- TLSH T14656AE01B9E18475E57303323665B3A6EDBEB9A19B3185CBB38C162E4F319C1873BB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd
- Size 6.1MB
- SHA256 968f35aba7b9b7fa742b20c79c329018e675d103891a2262596a4e3f779896fd
- MD5 fe731a7b7ef7920cfe1288a9f00e5064
- SHA1 afca0b03c20a762b1d5960f01ace92471ac1e4a7
- SHA512 d922f7aea126be737cbbce2b3c6a15e43d5af4275da868eb7a7c4b72e6c18b86c388c1c704d1a85d687a871612342d66c26f49e059ba5ca210abb448faed6d57
- SSDEEP 98304:S0a7S1evKNmlIcv2mtkFQMqUzhq70SIMUke3H7iWuPHWnvwLufuu9uuQuuuRBuuY:Sk1eemlIWMqUsA3bIqF
- TLSH T14656AE01B9E18475E57303323665B3A6EDBEB9A19B3185CBB38C162E4F319C1873BB51
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.