General
- Target draxbypass.exe
- Size 1.2MB
- Sample260813-3m72as1bld
- SHA256 24a57bbd09312b6f368e88cf72c4e963e96cab2be10cf34996e92d31bae6018b
- MD5 3c1e0008a7a3dd1184629fc20bf2c500
- SHA1 6d40e17d14c432985f251fd95630e6e12cb2fb60
- SHA512 442264ad4c8f86519c352c0b5cee9e14cfd0ca8bfe5739859e1e6e2af22c802c0a168b13c1d97cceb73e4908114eee9d910b56ea132500acc8ac997a8bbaff5f
- SSDEEP 24576:dgX28uDCTP8ebeN0cN9C6SEVgibnvEZ7U:SXwCwVCU93V9bnkQ
- TLSH T1E9458D49B2F940F8E0BF9174D9A1551BDA32785507309ADF03D40A592F73BE09ABBB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
draxbypass.exe
Resource
win11ltsc2024-20260709-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target draxbypass.exe
- Size 1.2MB
- SHA256 24a57bbd09312b6f368e88cf72c4e963e96cab2be10cf34996e92d31bae6018b
- MD5 3c1e0008a7a3dd1184629fc20bf2c500
- SHA1 6d40e17d14c432985f251fd95630e6e12cb2fb60
- SHA512 442264ad4c8f86519c352c0b5cee9e14cfd0ca8bfe5739859e1e6e2af22c802c0a168b13c1d97cceb73e4908114eee9d910b56ea132500acc8ac997a8bbaff5f
- SSDEEP 24576:dgX28uDCTP8ebeN0cN9C6SEVgibnvEZ7U:SXwCwVCU93V9bnkQ
- TLSH T1E9458D49B2F940F8E0BF9174D9A1551BDA32785507309ADF03D40A592F73BE09ABBB23
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.