General
- Target loader2.exe
- Size 18.1MB
- Sample260720-b44lnaby8j
- SHA256 46867477e6cdb6f25eec491a4bd54f37636e970cde158ef6553fed6952e0ebd5
- MD5 8e95beecdab6c20dcf9f932af5705077
- SHA1 d409228d036462ed4227e5b8d394cee5d0b16b85
- SHA512 3e816b4f3297a6fde61db0a4bc501008710efc233453e1277ceb1056c9afef01cca3a00f781a036d5c1c26f8a5d0112f1fa4a724643482d2a2cc788fd8954f69
- SSDEEP 393216:OlNIZ37UJ32eivEoxy8e6hPd6jzXEAphVtnIUQSg+w2stFPvF7dvxlL:ObS4ce2s7Ko3RphDto+w2sttvF7Z
- TLSH T1201733E8B2A169FFECF285395D6A9961E37374811F54C1BF07680E2A0D3F9940E38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
loader2.exe
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
loader2.exe
Resource
win11ltsc2024-20260710-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target loader2.exe
- Size 18.1MB
- SHA256 46867477e6cdb6f25eec491a4bd54f37636e970cde158ef6553fed6952e0ebd5
- MD5 8e95beecdab6c20dcf9f932af5705077
- SHA1 d409228d036462ed4227e5b8d394cee5d0b16b85
- SHA512 3e816b4f3297a6fde61db0a4bc501008710efc233453e1277ceb1056c9afef01cca3a00f781a036d5c1c26f8a5d0112f1fa4a724643482d2a2cc788fd8954f69
- SSDEEP 393216:OlNIZ37UJ32eivEoxy8e6hPd6jzXEAphVtnIUQSg+w2stFPvF7dvxlL:ObS4ce2s7Ko3RphDto+w2sttvF7Z
- TLSH T1201733E8B2A169FFECF285395D6A9961E37374811F54C1BF07680E2A0D3F9940E38761
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Accesses Microsoft Outlook profiles
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.