General
- Target TacticalDisplay.exe
- Size 1.3MB
- Sample260727-1783zssdma
- SHA256 474b2ae52e2f6b2455280caf28dd8155204db639162008866f02c0dd3a556466
- MD5 dbfc7b352d0b1e9b59659a388d5031fb
- SHA1 6b46c35311efee4c950ac3225e1cd2f00ef50c9e
- SHA512 920e012642faf35655fc3903c683d24027f1737cfeaaf8003bd899c7c6383f51f350a87467ee46f564901b1f4232bddde0f72dec21e4f8cfa271208ef0e082c8
- SSDEEP 12288:zJ4dCXzRKX4EcJupbSRi461R1VDrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIf:zJ4dCXzRKX4EcJAD1RvQJsD
- TLSH T1D45540212FE9817BE8A27BF576320F1086B67E86F9349D4CC15475990F62B814EED323
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
TacticalDisplay.exe
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
TacticalDisplay.exe
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target TacticalDisplay.exe
- Size 1.3MB
- SHA256 474b2ae52e2f6b2455280caf28dd8155204db639162008866f02c0dd3a556466
- MD5 dbfc7b352d0b1e9b59659a388d5031fb
- SHA1 6b46c35311efee4c950ac3225e1cd2f00ef50c9e
- SHA512 920e012642faf35655fc3903c683d24027f1737cfeaaf8003bd899c7c6383f51f350a87467ee46f564901b1f4232bddde0f72dec21e4f8cfa271208ef0e082c8
- SSDEEP 12288:zJ4dCXzRKX4EcJupbSRi461R1VDrP3224c+iKmDRkRFNBMUFeA+imQ269pRFZNIf:zJ4dCXzRKX4EcJAD1RvQJsD
- TLSH T1D45540212FE9817BE8A27BF576320F1086B67E86F9349D4CC15475990F62B814EED323
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.