General
- Target iplookup.exe
- Size 2.1MB
- Sample260804-24cq2szyex
- SHA256 49945b5eb3f80e6bb9dba81c6c6f643245bb0831ce2f6e5abf4db12ab6709b76
- MD5 cb4903c1c4f23b021905da634c002f04
- SHA1 c2ccf3a1e5037c6e540b94a59e2c367ba8cd9090
- SHA512 7f632331ba7f2fdd3c76f7f158a1cd6e79be796f2dc9f9149b7a071bb77b35fc4f0c6f189a8179eaf4947533513a3f926c879c50c8cf6cb13abdd424113f48fa
- SSDEEP 49152:PFkR/VWoA1QfIBoq2Pkbu5Gk6hQW/3f2V1mPzidqz/CIaB2w:NkR/VMCGvj/vYkP9aB
- TLSH T17DA59E1577EA8E2AD3EA2F345497A5310A75E9169B13A39F033842352FE33B40EC479D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
iplookup.exe
Resource
win11-20260513-en
11 signatures
600 seconds
Malware Config
Targets
-
- Target iplookup.exe
- Size 2.1MB
- SHA256 49945b5eb3f80e6bb9dba81c6c6f643245bb0831ce2f6e5abf4db12ab6709b76
- MD5 cb4903c1c4f23b021905da634c002f04
- SHA1 c2ccf3a1e5037c6e540b94a59e2c367ba8cd9090
- SHA512 7f632331ba7f2fdd3c76f7f158a1cd6e79be796f2dc9f9149b7a071bb77b35fc4f0c6f189a8179eaf4947533513a3f926c879c50c8cf6cb13abdd424113f48fa
- SSDEEP 49152:PFkR/VWoA1QfIBoq2Pkbu5Gk6hQW/3f2V1mPzidqz/CIaB2w:NkR/VMCGvj/vYkP9aB
- TLSH T17DA59E1577EA8E2AD3EA2F345497A5310A75E9169B13A39F033842352FE33B40EC479D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.