General
- Target voxy.exe
- Size 2.4MB
- Sample260802-2kf95agg62
- SHA256 22b7b0bf8db31debbfb0acd489047efe355f502170c66c535972aee2b3bdd4ca
- MD5 e1395bef8dcf66c32038ab973e06a7ce
- SHA1 d57b3e8fc089b0e298830084f302c39de150a61e
- SHA512 ae99437f347beb9924e30a71ec348f1d0df3bcfb5243807915a26410aeed0c79d240e844b6ce3633e3b1984d9b87fffb6366985a6cde05321fea701128299d60
- SSDEEP 49152:LDPvKZV1Ua8VC56CvKHRiCIVAm5+KyIbieAqGnBB65oIIlE:XKp4xiCIVAm5+Kyuiew656l
- TLSH T113C5C09672A500F8C16BC138C6479613EA72345C036166EF37DD89A52F63BE15BFAF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
voxy.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
voxy.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target voxy.exe
- Size 2.4MB
- SHA256 22b7b0bf8db31debbfb0acd489047efe355f502170c66c535972aee2b3bdd4ca
- MD5 e1395bef8dcf66c32038ab973e06a7ce
- SHA1 d57b3e8fc089b0e298830084f302c39de150a61e
- SHA512 ae99437f347beb9924e30a71ec348f1d0df3bcfb5243807915a26410aeed0c79d240e844b6ce3633e3b1984d9b87fffb6366985a6cde05321fea701128299d60
- SSDEEP 49152:LDPvKZV1Ua8VC56CvKHRiCIVAm5+KyIbieAqGnBB65oIIlE:XKp4xiCIVAm5+Kyuiew656l
- TLSH T113C5C09672A500F8C16BC138C6479613EA72345C036166EF37DD89A52F63BE15BFAF02
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.