General
- Target RotationRLTool.exe
- Size 4.8MB
- Sample260810-tttmtacr2z
- SHA256 07dc4e1ce4456aaacc14e33a0e4b9d5b4b0b62ab0a0ba2003609818fb921c6b0
- MD5 8b14a045844d61209a0a2a770e4a9544
- SHA1 5573d876e1177d23632ed79495b6df5786c523ad
- SHA512 2efd655a13a463f7fb6a59242062b517d0241fb31cf205f360cf184c36c5bc98d24c9ce66947e07decef45171a21c4dcee9636b8f472ffc6e1718788f629bb7c
- SSDEEP 98304:/xY8R8lJrOuGE38G6g6XwwTC9UujrM8ZCnM1UJBclrx4X6cyTlInrhh:/xuP/ML2wTC9UujrMGoyrYMSnr3
- TLSH T1EB36330867D104F7EDEB467E85A3C839B735BDA20B91C6DF026405A81F63AE1593E723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
RotationRLTool.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
RotationRLTool.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Behavioral task
behavioral3
Sample
rotation_rl_macro_tool.pyc
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral4
Sample
rotation_rl_macro_tool.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target RotationRLTool.exe
- Size 4.8MB
- SHA256 07dc4e1ce4456aaacc14e33a0e4b9d5b4b0b62ab0a0ba2003609818fb921c6b0
- MD5 8b14a045844d61209a0a2a770e4a9544
- SHA1 5573d876e1177d23632ed79495b6df5786c523ad
- SHA512 2efd655a13a463f7fb6a59242062b517d0241fb31cf205f360cf184c36c5bc98d24c9ce66947e07decef45171a21c4dcee9636b8f472ffc6e1718788f629bb7c
- SSDEEP 98304:/xY8R8lJrOuGE38G6g6XwwTC9UujrM8ZCnM1UJBclrx4X6cyTlInrhh:/xuP/ML2wTC9UujrMGoyrYMSnr3
- TLSH T1EB36330867D104F7EDEB467E85A3C839B735BDA20B91C6DF026405A81F63AE1593E723
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target rotation_rl_macro_tool.pyc
- Size 61KB
- SHA256 f7d01f0e097f126288dfda3a32f005ad332d95156e3c6dae8aa04ff0d362fa35
- MD5 9e75d33e48cb96db26b6a8fee1cdef09
- SHA1 39d1954c37524b6230bb60bc92f8583bd3fb03d4
- SHA512 7c5e232dc796c62bdd2c2ceeab9580edd35327494e034f23f8862439b697ffe9205a132148f2714bbc11086d24687f9b75d2e0a4c43a7e476788aeb85bae6dcc
- SSDEEP 768:MKmCTeBqYx8sq+oYq6I6eI5qmoYq6E6iIbnYylYy2CUbrOlYylYye8U/tyix9Y4D:MzCawCUbrOu8U/tyC37VPVrPRTi8
- TLSH T1DF53D75BA4209657FF54B47260D98584A3BC6FD27630C723310E4678ADDBBB6CDAA30C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10