General
- Target svc.exe
- Size 15.1MB
- Sample260816-wlw43stycz
- SHA256 64d5e1a8c75834211dd8bcfbaab00b87b5a85cf8db3108922bd25f84d5ee229f
- MD5 e672df73c4637a226aa17af0cda2157c
- SHA1 7258e79ade67f5a61452625f292a9eea54008922
- SHA512 e497fbc10799d1fefb205a78c5958bed1eca4826754cf79e8465bd70d4ea3ce09cb229c055fe27251fff424e4884e9065f7dd146739686f778174baaa1112cef
- SSDEEP 393216:E85vzvLoWdQ2l6+9JgLaeFpWpTfuADKc/wuRz:n5vzvLoWdQm9JRe6nDSS
- TLSH T1B1F63396620814D7C9A301B6D2D7C034DB22BE669BB0E2DF4BE066131DAB7E41D37F16
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
svc.exe
Resource
win10v2004-20260513-en
19 signatures
150 seconds
Behavioral task
behavioral2
Sample
svc.exe
Resource
win11ltsc2024-20260709-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target svc.exe
- Size 15.1MB
- SHA256 64d5e1a8c75834211dd8bcfbaab00b87b5a85cf8db3108922bd25f84d5ee229f
- MD5 e672df73c4637a226aa17af0cda2157c
- SHA1 7258e79ade67f5a61452625f292a9eea54008922
- SHA512 e497fbc10799d1fefb205a78c5958bed1eca4826754cf79e8465bd70d4ea3ce09cb229c055fe27251fff424e4884e9065f7dd146739686f778174baaa1112cef
- SSDEEP 393216:E85vzvLoWdQ2l6+9JgLaeFpWpTfuADKc/wuRz:n5vzvLoWdQm9JRe6nDSS
- TLSH T1B1F63396620814D7C9A301B6D2D7C034DB22BE669BB0E2DF4BE066131DAB7E41D37F16
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Loads dropped DLL
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Hide Artifacts: Hidden Files and Directories
MITRE ATT&CK Enterprise v16
Credential Access
Credentials from Password Stores
1Credentials from Web Browsers
1Unsecured Credentials
1Credentials In Files
1