General
- Target 3.7.zip
- Size 487KB
- Sample260730-gpqn5sdn81
- SHA256 ae6b2c2942b5d6058da702306170cbf2b57e6514aaa371889840b442cc37debe
- MD5 7bb6d5deafed3405a0df7817e5bcafe8
- SHA1 646566df3ab22fee95299c09abad504ca1630d02
- SHA512 c3798cb259f96f34936889e4c13657f93d3f1b589bb381cb610163540c5e01929b9a7f7d043918bb733fa3cc0985c806b81fdc9c53ac21fa89ed23fb575620df
- SSDEEP 12288:j1X/xb447cKiAZityUKvN+AIhlzk2ip8ng9bqbS5mJ5n/N3xdpSZ4nNu:Bxb4fKiAQyUKBIhlzkenyqW5mJ5/N35+
- TLSH T131B4238DF5B4623D8EF97571242F7D0AFAE20190B06BF79A4F52F0120632427E3A6B15
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3.7.zip
Resource
win10v2004-20260513-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 3.7.zip
- Size 487KB
- SHA256 ae6b2c2942b5d6058da702306170cbf2b57e6514aaa371889840b442cc37debe
- MD5 7bb6d5deafed3405a0df7817e5bcafe8
- SHA1 646566df3ab22fee95299c09abad504ca1630d02
- SHA512 c3798cb259f96f34936889e4c13657f93d3f1b589bb381cb610163540c5e01929b9a7f7d043918bb733fa3cc0985c806b81fdc9c53ac21fa89ed23fb575620df
- SSDEEP 12288:j1X/xb447cKiAZityUKvN+AIhlzk2ip8ng9bqbS5mJ5n/N3xdpSZ4nNu:Bxb4fKiAQyUKBIhlzkenyqW5mJ5/N35+
- TLSH T131B4238DF5B4623D8EF97571242F7D0AFAE20190B06BF79A4F52F0120632427E3A6B15
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.