General
- Target everything-software-windows-6.75.8.zip
- Size 141.9MB
- Sample260816-b3jvvsxcne
- SHA256 3cdda1a9fb5c0eb1ba0c8d908de3f7d1cf58e27b6362f689f5a5ca74586b1fc0
- MD5 075fea8866675e762c3a9034c52a945e
- SHA1 6b3274a5f116e50d70a6df12a391b088a0a56055
- SHA512 d1a3bd7b2a61c13aa706484377f6658719a896c10646f5ea4e21a9acaf3f99d304663b9ae430a6ba53319f158a69889b6d5bc1fe24b856d649f79fa8055566c7
- SSDEEP 1572864:PgrwnZESSHKWflZJl8WuRo5fr2a4sRzLC4VvLzHEKsi+9SYBrXs/KZSjyrW:PgrwnZESStDJltyjizLTbsi+cYBLcjyq
- TLSH T10468F1A61226937CEC5AAE3C49338162976E3F317B1054977C1CA235AFE7690D73BC06
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
everything-software-windows-6.75.8.exe
Resource
win10v2004-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral2
Sample
everything-software-windows-6.75.8.exe
Resource
win10ltsc2021-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral3
Sample
everything-software-windows-6.75.8.exe
Resource
win11-20260513-en
6 signatures
300 seconds
Behavioral task
behavioral4
Sample
everything-software-windows-6.75.8.exe
Resource
win11ltsc2024-20260709-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target everything-software-windows-6.75.8.exe
- Size 204KB
- SHA256 c00ad5e215fc79c900363bd454a69ee33ef737709e26c1b0c51ea1264709a3e1
- MD5 d1c090a023b3e5db9f1654eaaa2112f3
- SHA1 15724cb05e51c43960922d01a47a59bfbd3dd5b5
- SHA512 e08266b623adfe03c013b62566f138fa7b0f3fabfb9cb61c67b2da411a9fec48dd7b82f94ee6dd26cb23c08acfc26f5b7c9c09c4ecb08b2bd328a4390486c015
- SSDEEP 6144:z9AXp/TiRz3/pDRHYeo+mnvvFpi6BmeMpBd:z9o+74Ekpi6BS
- TLSH T1DD143A6B7B6940B5C2A7D13C99928642F7B278514F2197CF1291833E1F77BE0BD7A220
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext