General
- Target 4128087873922b3e1b7ed3d0913bf588
- Size 529KB
- Sample260715-dbh6csas7k
- SHA256 77a4eed3a1e27f3c7635cc38c3708dc95045cefb11b67521599e9c90e1ef09ef
- MD5 4128087873922b3e1b7ed3d0913bf588
- SHA1 a8570640c858724e551a40393a626f3fbce43934
- SHA512 05391542e4d95fe12044036554fbd9f4f0ff39ac68bf779b7a969d88463edaf97039d827f58e1c6bf494ae9b56c1ec8c96b3d7f013f55047e395d582a0acf3aa
- SSDEEP 12288:YBRdpQ73iBVYWfCwvEXgbvM0a4OTHiQIIFzuK9Gd9IUc:YHUw2W69XgbM0azTHiQIouDQ
- TLSH T1C0B423F5A7606BCC9D20122F2F4A2BCE19274B41B403C54A1AD2875A421F6FF4E7AD9C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Launcher.cmd
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
Launcher.cmd
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target Launcher.cmd
- Size 25B
- SHA256 05ae6b542fd187c062eac38abfbfb6a9b8f35bbec3aff29950912f7d89092c5a
- MD5 b714c11cb3306e44c8aa3fcf5b4739ae
- SHA1 b383381540546d52882fd232597d4f770c608cbf
- SHA512 4c24cf6da0ded6659a7925e5978def5fc1c77eb21e788090c4effb57949c0da84a4eb7f2096574c8912ca9825f737fc03d716eda0c2cd9eec87e6c38f05498ae
- MD5 SHA1 SHA512
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.