General
- Target Shsqpnn.exe
- Size 321KB
- Sample260715-wt9edaet4y
- SHA256 b068667538ac4e42bb0cffd04b8f957abcb137264c0f42d03c36f45881c4f8ed
- MD5 bc1b3cb6808914798e0b9172873caa12
- SHA1 0e57b2c83a7855cfdab93afd2015598eb00e176a
- SHA512 09f60dcc1e243d58fcefc9e524ebcc782841b04af9281b3ae55c0097cba6c0ba959d6a62bd1969437acb6c40fb9dc561f490a7692d1076fc6e6b734fecbb4f76
- SSDEEP 6144:jUVYsZixBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:YCuFu3TCIyESY+z8WHH
- TLSH T18C648D5823ED8A26E6FE62B5E83D040D47FAB51A612EFB4F19A410FD6C13F8449017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Shsqpnn.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
Shsqpnn.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target Shsqpnn.exe
- Size 321KB
- SHA256 b068667538ac4e42bb0cffd04b8f957abcb137264c0f42d03c36f45881c4f8ed
- MD5 bc1b3cb6808914798e0b9172873caa12
- SHA1 0e57b2c83a7855cfdab93afd2015598eb00e176a
- SHA512 09f60dcc1e243d58fcefc9e524ebcc782841b04af9281b3ae55c0097cba6c0ba959d6a62bd1969437acb6c40fb9dc561f490a7692d1076fc6e6b734fecbb4f76
- SSDEEP 6144:jUVYsZixBwarTXCcHTGVMLxu+H6DGWESIt+z8WC3iH:YCuFu3TCIyESY+z8WHH
- TLSH T18C648D5823ED8A26E6FE62B5E83D040D47FAB51A612EFB4F19A410FD6C13F8449017B7
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1