General
- Target b.7z
- Size 1.5MB
- Sample260804-vx2chawcjh
- SHA256 9dfbe92313bc0d309a0fb07cb6461d6c17f18b9b66842b101593373c1bf9fff7
- MD5 6e98c42d96b51f943091ddb291c61d88
- SHA1 d62b69b2191388faf5722f51a0c7433eb1a70bfd
- SHA512 2917ebe68cd7ac1f9c70499cef74aab4de4e9906c0d33f994f1140251cf3f66dfbc7b2a5fea09d600566437bb902c2897b3b80382fbec4e6f476d7a66a51310c
- SSDEEP 49152:qwjRY9I9m5o2OuLwG/1TEi2XpknEYmzRPRI0Qe:3NeI9mVXLh/ge6RZIO
- TLSH T1007533F1FE242D0DB25269BD58502D51290ADF31DC0A5DD0A8E93D7310DA2DE9EFA38B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
wyhrytj.exe
Resource
win10v2004-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral2
Sample
wyhrytj.exe
Resource
win10ltsc2021-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral3
Sample
wyhrytj.exe
Resource
win11-20260513-en
1 signatures
300 seconds
Behavioral task
behavioral4
Sample
wyhrytj.exe
Resource
win11ltsc2024-20260709-en
1 signatures
300 seconds
Malware Config
Targets
-
- Target wyhrytj.exe
- Size 784.4MB
- SHA256 abf1efcc80b8338fae7e93fa389ee9968ffbe9416d8fd7abdfb088c3a63703c5
- MD5 16bc0bb2da6bc9bae10b0dc3e91e20b7
- SHA1 f048714a9837614444d3f583471c3fe9a9bd66e6
- SHA512 f61aa24403440eda20f1118da00cb62da6aece5c1c52868b4cf9715c3abd667f338e650290ecbb5d152f24bed35c329d601b1e081d304daec92a3e90b7659cf9
- SSDEEP 98304:Kre8l0SOXLWwoAgGny/rNmeHRK5jAVBgLlqbToE:Ie8KNKwoiy/rNdcJuBgBqXo
- TLSH T1A0893D59D6E196B7C7D25F367EA6FC2A0680AEC3A5D8E551A3300097827F28EF4133D1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.