General
- Target lolzBYFLUX.exe
- Size 22.3MB
- Sample260810-yv1vqsstdx
- SHA256 49f727365376122744de0ce731bef3cd207cd80e033ba4ff4e88cfa8d711906b
- MD5 3b8820ccc5e47b2fe34842c8b2723305
- SHA1 09e53b3cfdb96c45b3f1bb2c4328dab920c5d614
- SHA512 686a8398868dd20aa5ae38588651372954d2f1d1061c953721b345f4ad535c24838ac28d6db7f68e253615336f67e0f4daa8c0e55d75d2b3c287f5a5ff97deaf
- SSDEEP 393216:vO9HrW8iGGpY5WJVwJodQJlQwF3MnG3T7Yx4rILCaC2U38PhjmZF9SQcF4Ujdn/h:2JrW8iGcYWJqudQR3MGDm4Z2UykTMh/h
- TLSH T1FD3733C9BB4E04EBC04A503D45D6E6A04A7179EA4BB4D1AB87F809415E532D8FF37BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
lolzBYFLUX.exe
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
lolzBYFLUX.exe
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target lolzBYFLUX.exe
- Size 22.3MB
- SHA256 49f727365376122744de0ce731bef3cd207cd80e033ba4ff4e88cfa8d711906b
- MD5 3b8820ccc5e47b2fe34842c8b2723305
- SHA1 09e53b3cfdb96c45b3f1bb2c4328dab920c5d614
- SHA512 686a8398868dd20aa5ae38588651372954d2f1d1061c953721b345f4ad535c24838ac28d6db7f68e253615336f67e0f4daa8c0e55d75d2b3c287f5a5ff97deaf
- SSDEEP 393216:vO9HrW8iGGpY5WJVwJodQJlQwF3MnG3T7Yx4rILCaC2U38PhjmZF9SQcF4Ujdn/h:2JrW8iGcYWJqudQR3MGDm4Z2UykTMh/h
- TLSH T1FD3733C9BB4E04EBC04A503D45D6E6A04A7179EA4BB4D1AB87F809415E532D8FF37BB0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Checks whether UAC is enabled
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.