General
- Target RokuTeam_Loader.exe
- Size 112.1MB
- Sample260723-efrhza1alf
- SHA256 d5253014c9eee2460749d64e06f22a4dc22f8fe55b1d8a8c31610141158733f3
- MD5 2ba583204b2cbd755dd10551b94c1530
- SHA1 ed400cd76f03d82fa74cf6e6d33044537c813b16
- SHA512 523b932a943519a7627076762a7ec12055f695a9c98454daa1fd0bbd171e12fba7e720d15355356733526738f4e93bf82db817fb79f3f6338cd9cc981317b1f9
- SSDEEP 1572864:gAXffHRdXmZF8CY8EpRIf2pjmom3H7S7u+VYVXqwb:13iXtqwb
- TLSH T1C9486C43B2A75098E4BBC97592D65323E5337C8A1F3069EF15845B312F73AE09B39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
RokuTeam_Loader.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
RokuTeam_Loader.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target RokuTeam_Loader.exe
- Size 112.1MB
- SHA256 d5253014c9eee2460749d64e06f22a4dc22f8fe55b1d8a8c31610141158733f3
- MD5 2ba583204b2cbd755dd10551b94c1530
- SHA1 ed400cd76f03d82fa74cf6e6d33044537c813b16
- SHA512 523b932a943519a7627076762a7ec12055f695a9c98454daa1fd0bbd171e12fba7e720d15355356733526738f4e93bf82db817fb79f3f6338cd9cc981317b1f9
- SSDEEP 1572864:gAXffHRdXmZF8CY8EpRIf2pjmom3H7S7u+VYVXqwb:13iXtqwb
- TLSH T1C9486C43B2A75098E4BBC97592D65323E5337C8A1F3069EF15845B312F73AE09B39B21
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.