General
- Target atom.dll.exe
- Size 7.5MB
- Sample260816-cd3gcaag23
- SHA256 b41017f98f93938550a6655981a500ca5a5a97ea9503e3de89948f8d3cab057b
- MD5 16165d3d6ccfd3404b2fd36dbb4cfa81
- SHA1 f032e1b825b176def5a5ee56a0fc5579b5d17896
- SHA512 944569581d262f351fd2a62311edae814ccf6ba24a33c714f4d2dd273c737a48dad6fc29a26db2d892bba8f9620e2a972ca5ae067509e24745233d38119078df
- SSDEEP 196608:URobyBfr2lJOVqKXWcF5t2Q8X3ZYFTSRzOeYT9UMeN/I5us:URobyBfrLgU3KFnZE86eYTOMepx
- TLSH T1B086BE55A3C45AE9D416DA38CB14E332C2B2BD624A76C08B499AF70A1F77E514F3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
atom.dll
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
atom.dll
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target atom.dll.exe
- Size 7.5MB
- SHA256 b41017f98f93938550a6655981a500ca5a5a97ea9503e3de89948f8d3cab057b
- MD5 16165d3d6ccfd3404b2fd36dbb4cfa81
- SHA1 f032e1b825b176def5a5ee56a0fc5579b5d17896
- SHA512 944569581d262f351fd2a62311edae814ccf6ba24a33c714f4d2dd273c737a48dad6fc29a26db2d892bba8f9620e2a972ca5ae067509e24745233d38119078df
- SSDEEP 196608:URobyBfr2lJOVqKXWcF5t2Q8X3ZYFTSRzOeYT9UMeN/I5us:URobyBfrLgU3KFnZE86eYTOMepx
- TLSH T1B086BE55A3C45AE9D416DA38CB14E332C2B2BD624A76C08B499AF70A1F77E514F3FB10
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of SetThreadContext