General
- Target PrimeX.exe
- Size 33.0MB
- Sample260727-nde7ladn2v
- SHA256 7931c08ef30d036ae125cf6f1b527dcb14a9213baf44d2e27277686d73cb3491
- MD5 808238c91ad3fe8841ac2a88bb8a23e3
- SHA1 d295d80b6f1a53754d8a7eb94b3b17d4879de71e
- SHA512 0a04d790fe0dac5db8ba884397d608e7556aef3795d1b51e5121eb0802d325b041e7e96509170eba8dba0e7c07dd6449866fd2705b24498ff184fe2c7054bea7
- SSDEEP 786432:VU6LGwqW8yEdYWJqtJaohC+0LhXIiaxyNOsWYXoQBaKM:aNWUdYgqphCFLlIi6YX1BT
- TLSH T16A7733AC7A8640A5EADE903C66F72352666128E60731C66F87F48D613C337F4AF34572
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
PrimeX.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
PrimeX.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target PrimeX.exe
- Size 33.0MB
- SHA256 7931c08ef30d036ae125cf6f1b527dcb14a9213baf44d2e27277686d73cb3491
- MD5 808238c91ad3fe8841ac2a88bb8a23e3
- SHA1 d295d80b6f1a53754d8a7eb94b3b17d4879de71e
- SHA512 0a04d790fe0dac5db8ba884397d608e7556aef3795d1b51e5121eb0802d325b041e7e96509170eba8dba0e7c07dd6449866fd2705b24498ff184fe2c7054bea7
- SSDEEP 786432:VU6LGwqW8yEdYWJqtJaohC+0LhXIiaxyNOsWYXoQBaKM:aNWUdYgqphCFLlIi6YX1BT
- TLSH T16A7733AC7A8640A5EADE903C66F72352666128E60731C66F87F48D613C337F4AF34572
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.