General
- Target UnityCrashHandler64.exe
- Size 968KB
- Sample260808-xbb7lasfrb
- SHA256 0720b89f6ff8499ab07e698097bd40b5343c2a0f2b757367d98286a1ac655777
- MD5 a9411b8ca44bdd5eae6a290a4b10b386
- SHA1 1160d6b5fa94cf32a2d28bae59a825a68b21eb42
- SHA512 88a73deef0ec6dc47eec2aeb19394b800d779b78a9ded63572f4306b7a7fd64ae604b4c68ecd65410187d0d698fa7ab9519d263cf1515f6c33d48e1b6209c118
- SSDEEP 12288:mb5YI+9IPDsKJDCRyXIZGVpDNW9mh7oSD6mynYCQfz2fzAN:mb+lEsKJMKDNW926mIYjz+zAN
- TLSH T13D256C1A62A800ECE5778179CA56594EE7B27C0503619BEF13A0B6671F33AE51F3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
UnityCrashHandler64.exe
Resource
win10v2004-20260513-en
14 signatures
900 seconds
Behavioral task
behavioral2
Sample
UnityCrashHandler64.exe
Resource
win11ltsc2024-20260709-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target UnityCrashHandler64.exe
- Size 968KB
- SHA256 0720b89f6ff8499ab07e698097bd40b5343c2a0f2b757367d98286a1ac655777
- MD5 a9411b8ca44bdd5eae6a290a4b10b386
- SHA1 1160d6b5fa94cf32a2d28bae59a825a68b21eb42
- SHA512 88a73deef0ec6dc47eec2aeb19394b800d779b78a9ded63572f4306b7a7fd64ae604b4c68ecd65410187d0d698fa7ab9519d263cf1515f6c33d48e1b6209c118
- SSDEEP 12288:mb5YI+9IPDsKJDCRyXIZGVpDNW9mh7oSD6mynYCQfz2fzAN:mb+lEsKJMKDNW926mIYjz+zAN
- TLSH T13D256C1A62A800ECE5778179CA56594EE7B27C0503619BEF13A0B6671F33AE51F3F720
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory