General
- Target HB_64.exe
- Size 376KB
- Sample260724-jeha5avdkd
- SHA256 0beaa5ce9a409e12323af1630a44f6d61fb309f7f5f377b849588fa53241a884
- MD5 b290f01d4988ccb3b0d67b89b79a3c63
- SHA1 c7c41e39c11b5cb69227a2b94bef71b3a395abfa
- SHA512 d762ec0d6bc2e120227ab28cced73866cba477d72f52c0fa8232720c053c6547383848701edddd9e20435f8bea02c3ffa37ce0fa7bee29d12b91ce6f751785af
- SSDEEP 6144:AHdhPDjUVFPeDADETZZX+t4Z0dS7jNt5z1GxxQol0XAD35m0ampO83rvdcp:AzDQL2iqjIeKQG5+YV
- TLSH T144848C1772E850F6D9668239C9A38A06FB73781607209B8F17A4477A1F237D1BD3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
HB_64.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
HB_64.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
127.0.0.1:6666
-
127.0.0.1:8888
-
127.0.0.1:80
Attributes
-
campaign_date
2026. 7.23
Targets
-
- Target HB_64.exe
- Size 376KB
- SHA256 0beaa5ce9a409e12323af1630a44f6d61fb309f7f5f377b849588fa53241a884
- MD5 b290f01d4988ccb3b0d67b89b79a3c63
- SHA1 c7c41e39c11b5cb69227a2b94bef71b3a395abfa
- SHA512 d762ec0d6bc2e120227ab28cced73866cba477d72f52c0fa8232720c053c6547383848701edddd9e20435f8bea02c3ffa37ce0fa7bee29d12b91ce6f751785af
- SSDEEP 6144:AHdhPDjUVFPeDADETZZX+t4Z0dS7jNt5z1GxxQol0XAD35m0ampO83rvdcp:AzDQL2iqjIeKQG5+YV
- TLSH T144848C1772E850F6D9668239C9A38A06FB73781607209B8F17A4477A1F237D1BD3E721
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10