General
- Target loader.exe
- Size 310KB
- Sample260818-12grjsak4y
- SHA256 3b067fe19629d1949dfaf6e9fb30e54414f0b21086454d008e499229919e05e8
- MD5 c0545fa07901f6ff7c6212c9cc41dabe
- SHA1 76b7f965bfb0e795ea837e55f6fe7f1fd6e68a3b
- SHA512 48513dd35657da6cf7c2203ce17049bec648cccc3f89bb960077e96a268665a42116c0ec58447c2625f46b988db5d87a8fa9803fdf4fa7253ba55f7094e792dd
- SSDEEP 6144:ewdW+Jjhs3gbeFv9BYtoqswsSm1IBC/H:A+Jjhs3gUY+NSbBo
- TLSH T18C647D29E79410FAE567857CCD424906EBB2BC1607A1DBCF23E049962F27BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
loader.exe
Resource
win10ltsc2021-20260513-en
3 signatures
300 seconds
Malware Config
Targets
-
- Target loader.exe
- Size 310KB
- SHA256 3b067fe19629d1949dfaf6e9fb30e54414f0b21086454d008e499229919e05e8
- MD5 c0545fa07901f6ff7c6212c9cc41dabe
- SHA1 76b7f965bfb0e795ea837e55f6fe7f1fd6e68a3b
- SHA512 48513dd35657da6cf7c2203ce17049bec648cccc3f89bb960077e96a268665a42116c0ec58447c2625f46b988db5d87a8fa9803fdf4fa7253ba55f7094e792dd
- SSDEEP 6144:ewdW+Jjhs3gbeFv9BYtoqswsSm1IBC/H:A+Jjhs3gUY+NSbBo
- TLSH T18C647D29E79410FAE567857CCD424906EBB2BC1607A1DBCF23E049962F27BE05E3E711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.