General
- Target Pluto.dll
- Size 1.8MB
- Sample260727-ea8v3agn8w
- SHA256 6b86ec92fc00a2bdf6575c95d1bd571d19fdd385b129dbd956e538371e530f91
- MD5 52af8f50e084078f34e3b3495dedc00f
- SHA1 45c891017131ed8d8683cb3332b1bfbb02b221fc
- SHA512 a6c9a5a84e093ac688cbb90e9656d14c2c911cd647515d5c808623b18950ef03f3c4bf4d93bcc950a94c7d3b5dea37cfc637c08f70def559a7bf9ca4c4910ef6
- SSDEEP 49152:6toG+BE4dGZkzrUZid31Md7wtjAClwGFeZ7dzlQgb:PyA5GQAClwGFeZ7dzz
- TLSH T11E959D6AA3A400E9C567D0BCC7574E57D7F2B4440360ABEB06D4AE6A2F13BE54B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Pluto.dll
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
Pluto.dll
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Pluto.dll
- Size 1.8MB
- SHA256 6b86ec92fc00a2bdf6575c95d1bd571d19fdd385b129dbd956e538371e530f91
- MD5 52af8f50e084078f34e3b3495dedc00f
- SHA1 45c891017131ed8d8683cb3332b1bfbb02b221fc
- SHA512 a6c9a5a84e093ac688cbb90e9656d14c2c911cd647515d5c808623b18950ef03f3c4bf4d93bcc950a94c7d3b5dea37cfc637c08f70def559a7bf9ca4c4910ef6
- SSDEEP 49152:6toG+BE4dGZkzrUZid31Md7wtjAClwGFeZ7dzlQgb:PyA5GQAClwGFeZ7dzz
- TLSH T11E959D6AA3A400E9C567D0BCC7574E57D7F2B4440360ABEB06D4AE6A2F13BE54B3E710
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.