General
- Target greque_i_io_github_3.4.zip
- Size 570KB
- Sample260802-ajdn3azhja
- SHA256 5b7aa9b73ba45f8239a1e1dae53d8b3f6b126aeec8238efd7ff8e8a15ae91e0c
- MD5 42929268e8d67a6aead06325ebb018db
- SHA1 47bb36f2ad960eed218390bc7a16284c7901e423
- SHA512 5bc07798335fd7964bf66e64ecadf8fa0ea0d0ccbea6ebc68102919fe332f04481c0af6978e6cd440f0542cf68b5bb6b437c06f20c7d5d0cefbc675be5aa4314
- SSDEEP 12288:ZeElNtIBB2gX3U5EA7iOm6Jjghf4xSfUxZ2U18/dtQlSprSp16nQAH9N3ez8:ZeSIBBfHim6Jj6ESfUxZ91kmY/9Heg
- TLSH T127C423B7179AB4887503E3E4814C6D94C9AF20D957C3436ECA1E2693F5BE647FB2009E
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
LaunchApp.cmd
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
LaunchApp.cmd
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
genlibbc.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral4
Sample
genlibbc.js
Resource
win11ltsc2024-20260710-en
1 signatures
150 seconds
Behavioral task
behavioral5
Sample
java.exe
Resource
win10v2004-20260513-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
java.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target LaunchApp.cmd
- Size 27B
- SHA256 2f5ae87d4514e5227a31ba3e4ee2a52c33f9e3694280599979cf4ba98435f13f
- MD5 8aa5342f964868b6c939f9c63ff8bfa5
- SHA1 6f36802019734d6b9e51c2211ea96af19fdd631f
- SHA512 97665240bc9de52a627e744950d957d969968cc76a5fe5c8839bd6fcc10218c5e2da18a09305bcd9b149438fb1b6809a5999a23926d1f3d33dfba46859cb70b4
- MD5 SHA1 SHA512
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target genlibbc.txt
- Size 300KB
- SHA256 bdfef318db2ee1d390f2fa530b5d9c9af2702254127a7ec9a907f60f53db0bb0
- MD5 c3624ba215aec37f9557bb1a31a970b6
- SHA1 52d98c573278d2667faf8272f16c5523c05ab889
- SHA512 bfa4ce009214ee7fd1235a76dd62a542bbff1277903d3090fac3c3aee1f36d88952be256693e398e58c87477a0b9687ca7b21b78d0126c087be665660567b6ed
- SSDEEP 6144:fF2wyCZtPqYYm7QYc9IXjmiFZxgHwrjKgt:fF7zYWQuTJKgt
- TLSH T13864F8D0658808E6FAEBC681DC738DDA29B724F1878A168F4F1CFBE47611192D5CDCA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10 -
- Target java.exe
- Size 852KB
- SHA256 f76add7e7ada32704762d833a3137f1c1061b23825b1d4285cc0752bd86df4b5
- MD5 0bb02cd7d994e9b87c2d27717e11fc5b
- SHA1 ebd976825bf80b90f133b8196e9f9f43946d67c3
- SHA512 e833b19538d12cb394282311a0073b865f518184c572fb2753d335d46b7d3e36ffdd5b0e7fc7b6490a11c5986cc2a0ec654e9f03f1c784b1f0bcf7df4794b180
- SSDEEP 12288:l628L2HCSGt4FMz4+PUlv2kyK5yB1Tazo/UCjTMnvKdsoFwhiHBjBZoR:c2HCSucMz4CYbV5yBtaziU0TcSNFPhL
- TLSH T1D7058E59A27401F6D9A78134C9569A4BD7B2781607205AEF03E06BB73F37BE11E3B321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10