General
- Target nulluty.exe
- Size 8.0MB
- Sample260717-1chmjsat91
- SHA256 a13ff1ffd69678a6dcc8dd66a686c48921e6925a8ebed0f0dc0a2ec5d4862269
- MD5 3f138c933263e02c513e2b1741a6474f
- SHA1 d49ff578042ba64b6b50e70d340c0cc553c229ea
- SHA512 f04e46365e85c38310d573384ce444df558dc0aa5b70788c371e07478fe239a305665e4f9eaa3e92e8af5531aab588b3d1bc402a87d660ea349aa5636caac368
- SSDEEP 768:2S6u/JE7FlrTCkaSQ4FoS5vBAYSjPfA09S78w1eH+1:2S6mGmC8YSjPt9pw1/
- TLSH T1C8862A16565524ECC262F2B9D79F2A42D672784D33616BDF23C0B0DA0F2F6C069F7826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
nulluty.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
nulluty.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target nulluty.exe
- Size 8.0MB
- SHA256 a13ff1ffd69678a6dcc8dd66a686c48921e6925a8ebed0f0dc0a2ec5d4862269
- MD5 3f138c933263e02c513e2b1741a6474f
- SHA1 d49ff578042ba64b6b50e70d340c0cc553c229ea
- SHA512 f04e46365e85c38310d573384ce444df558dc0aa5b70788c371e07478fe239a305665e4f9eaa3e92e8af5531aab588b3d1bc402a87d660ea349aa5636caac368
- SSDEEP 768:2S6u/JE7FlrTCkaSQ4FoS5vBAYSjPfA09S78w1eH+1:2S6mGmC8YSjPt9pw1/
- TLSH T1C8862A16565524ECC262F2B9D79F2A42D672784D33616BDF23C0B0DA0F2F6C069F7826
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.