General
- Target AttackClient.exe
- Size 11.0MB
- Sample260815-xfczpasbqc
- SHA256 b8065963666921a4f5c0eb5c6ab7c2916a9162d4267792c28d7d9417f05299a6
- MD5 530d9303a2187dd45500ed8024b600bc
- SHA1 97ed2d6e041ed5187ecb5bcedfddfebe8c1266a5
- SHA512 c6312c965e3ec0f8793d5ef68eabe1935579538fca34d6bbcd4047397aaf5e234a6c2ed415bf118a42d2d44255c0f605cd84909386a474f7055f8bb4daf0a4ab
- SSDEEP 196608:AC4C8HJOHPkID+NzJkSugNsV8GY64sfRkaERa187b28ZlyCgXSvhhB:AvLH/syJkbgNs8dns6aERw87y8ZQ9Xqh
- TLSH T119C6220BB9D610B4D44FEB30AD1666CEA4EC9FD81C10812A764C759CB13AB1D1BBEBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
AttackClient.exe
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
AttackClient.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target AttackClient.exe
- Size 11.0MB
- SHA256 b8065963666921a4f5c0eb5c6ab7c2916a9162d4267792c28d7d9417f05299a6
- MD5 530d9303a2187dd45500ed8024b600bc
- SHA1 97ed2d6e041ed5187ecb5bcedfddfebe8c1266a5
- SHA512 c6312c965e3ec0f8793d5ef68eabe1935579538fca34d6bbcd4047397aaf5e234a6c2ed415bf118a42d2d44255c0f605cd84909386a474f7055f8bb4daf0a4ab
- SSDEEP 196608:AC4C8HJOHPkID+NzJkSugNsV8GY64sfRkaERa187b28ZlyCgXSvhhB:AvLH/syJkbgNs8dns6aERw87y8ZQ9Xqh
- TLSH T119C6220BB9D610B4D44FEB30AD1666CEA4EC9FD81C10812A764C759CB13AB1D1BBEBC5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger