General
- Target 8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b
- Size 87KB
- Sample260810-l4mm9awend
- SHA256 8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b
- MD5 216ed303559075309f0101ce8c083f7d
- SHA1 2dc4eaed7541c55e840eb1e0194f95c967049cee
- SHA512 ee638ad63ea945907f9c4e39be3dc014af224f543c35427962c7959ce91d5704a2cd576079228d1574a2c369e1479d2cc123bd8308a552b428628a05da84868e
- SSDEEP 1536:M/m/1UpUQTS3kd/cVzvZaZyAuQABEw6T9Mhs8rlsSSV6bB+AUwREa0LpNvTp:M3lBcVoZYrlsSu6bB+3wREa0LpNvV
- TLSH T18E9329457BEC4918E1FF4ABAB97213108731F8534D31DE5E0EDA60A90A767D08A01FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
galaxyrat
Mutex
-
D1AEC9D3
Attributes
-
pastebin
https://pastebin.com/raw/5jpAnbJs
Targets
-
- Target 8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b
- Size 87KB
- SHA256 8db208e42fae8c9822b80b796ed89b265c22e1155099722c7595dd9d522faa4b
- MD5 216ed303559075309f0101ce8c083f7d
- SHA1 2dc4eaed7541c55e840eb1e0194f95c967049cee
- SHA512 ee638ad63ea945907f9c4e39be3dc014af224f543c35427962c7959ce91d5704a2cd576079228d1574a2c369e1479d2cc123bd8308a552b428628a05da84868e
- SSDEEP 1536:M/m/1UpUQTS3kd/cVzvZaZyAuQABEw6T9Mhs8rlsSSV6bB+AUwREa0LpNvTp:M3lBcVoZYrlsSu6bB+3wREa0LpNvV
- TLSH T18E9329457BEC4918E1FF4ABAB97213108731F8534D31DE5E0EDA60A90A767D08A01FDB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.