General
- Target psycho.exe
- Size 31.2MB
- Sample260718-schnjsdz8n
- SHA256 4d52fab50f53ea6c46f266d75f6866310e2c1d82933963043a8b486f74559f2b
- MD5 4ed0b28d97a2837a63df728583a022ac
- SHA1 109e3043df38d466f881f6eff8a15aea2f164a2c
- SHA512 e81962395e6a905728ed53468350c0dbd0e68d5e6d15d0d5ed881be68a82ec5bf92404699cc78384e959f47c03214c4705950499351130cd619786977e858ed7
- SSDEEP 786432:ONW8eOCC2j6+s7LWB75zuD0LhX+xiQyR:gWFOCC2qHWB75igLl+A
- TLSH T1F867336573CA40B5FADBA439D191066227A2709803F0C69F4BE50D221EAF1F9FE35277
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
psycho.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
psycho.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target psycho.exe
- Size 31.2MB
- SHA256 4d52fab50f53ea6c46f266d75f6866310e2c1d82933963043a8b486f74559f2b
- MD5 4ed0b28d97a2837a63df728583a022ac
- SHA1 109e3043df38d466f881f6eff8a15aea2f164a2c
- SHA512 e81962395e6a905728ed53468350c0dbd0e68d5e6d15d0d5ed881be68a82ec5bf92404699cc78384e959f47c03214c4705950499351130cd619786977e858ed7
- SSDEEP 786432:ONW8eOCC2j6+s7LWB75zuD0LhX+xiQyR:gWFOCC2qHWB75igLl+A
- TLSH T1F867336573CA40B5FADBA439D191066227A2709803F0C69F4BE50D221EAF1F9FE35277
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.