General
- Target 8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d
- Size 10.9MB
- Sample260813-sqjsrsshkg
- SHA256 8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d
- MD5 2c2bf39ee7492c09af33084d27c8c0e0
- SHA1 09a7069a94187dac45ffb5d3d5a4c8be2e61cb12
- SHA512 88990808454e3befe98e45b591b19242943f6cee36957c3ae98e0d26f530dae457963664b014927fd8b8bc7eae6a2ce64e7a75d25871645e6627f7e26a605b76
- SSDEEP 196608:f3kxF1gAfPWcYCF5yHdfvzUtawYsc3ng6zln+QSY8Jpeyud5:f3kr1bWcqdvO+nhh+0Fyud5
- TLSH T108B62333F28A533EE46A5A3759B292105D3B7A60A41E4C1297EC3C9CCF7A1A01D7F653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d.exe
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d.exe
Resource
win11ltsc2024-20260709-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target 8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d
- Size 10.9MB
- SHA256 8afa5846de8b615ff694b32c93443c44b70998a86cc0fe6d0148b3faa6fc012d
- MD5 2c2bf39ee7492c09af33084d27c8c0e0
- SHA1 09a7069a94187dac45ffb5d3d5a4c8be2e61cb12
- SHA512 88990808454e3befe98e45b591b19242943f6cee36957c3ae98e0d26f530dae457963664b014927fd8b8bc7eae6a2ce64e7a75d25871645e6627f7e26a605b76
- SSDEEP 196608:f3kxF1gAfPWcYCF5yHdfvzUtawYsc3ng6zln+QSY8Jpeyud5:f3kr1bWcqdvO+nhh+0Fyud5
- TLSH T108B62333F28A533EE46A5A3759B292105D3B7A60A41E4C1297EC3C9CCF7A1A01D7F653
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.