Analysis
- user interaction
yes - max time kernel
26s - max time network
23s - platform
windows10-2004_x64 - resource
win10v2004-20260513-en - resource tags
arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
04/08/2026, 23:35
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
voidexternal.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
voidexternal.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
General
- Target voidexternal.exe
- Size 676KB
- Sample260804-3lapeatare
- SHA256 01867942e022a61d7a08de30a5611c601ef53be3a393898595bcc54647553d12
- MD5 e36bb51b2738de0f81ae33d88fea521e
- SHA1 bae8d4003c708b34f1b3916798711a209bcb4deb
- SHA512 809913b9e7a93799633c756fd66a82bb3b0c9bb01f672ea3e29ba15349d46a6fe8ef94514983f1d6cfd26625a15939307e6a0a17df2c2206e487510f026fd695
- SSDEEP 12288:KsFe62FdAXii/zlmgQ9YnSqNzXIhtxXccPdYs/jYionpXeRKYi:K168MikiY7cZcC7MionpXEKY
- TLSH T16EE4AE42B6B551F8D07BD179D586E21BFB753819172046CB63E009A82FA37F06BBB702
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
flow ioc 4 raw.githubusercontent.com 3 raw.githubusercontent.com