36d0bac5743ed9c6858258f28f2c2f9161dc06c4d5af73eb7eda1211ea610758

General

Target
uncensored_qwen_v2.6.zip
Size 475KB
Sample260822-y2ewvayera
SHA256 36d0bac5743ed9c6858258f28f2c2f9161dc06c4d5af73eb7eda1211ea610758
MD5 bf21a07ad5743d3ae9f55ff526428a0a
SHA1 8e3391c17c3f4fb6f42594de7425df96dbbbc01e
SHA512 0a6facb30f67e4ef8ef0cdb3fdeebdf21df2fdde373f648e6bd38bcfead13c6725ed0538d78b18bef4898979b389f8744b89fa31496788375f3b586d28448218
SSDEEP 12288:cr06AUv4SnAQPKTYNk/wm+iTcchv4xtHYc2OnZ6:cr06AUv4t1cNk/wjibhv4b2OnM
TLSH
T152A4238274716D06D096CFBDD4C1AACAD06A023D35263BE5A39294CABD940367F9BF13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery execution

Malware Config

Targets

- Target
  Application.cmd
- Size 25B
- SHA256 7c4f3e09c6428d0a0d7d85615695f5fedb35bb4e7180d31e1f8a1bacf22e5639
- MD5 17d94f34b9d15449b03bc099a637782b
- SHA1 eb474f898256e8e7baaf0d63b306d1169e637c73
- SHA512 0cc764b39983867bbb53bf83563c8bf15d97d921e2a0c1148abeed7df73e1c79f2cac57ea69c9f5fcfadf2cd91bc12756a2ff6f682c77172b7df74f144cbdc38
- MD5 SHA1 SHA512
Score

6^/10

discovery execution
- Looks up external IP address via web service
  Uses a legitimate IP lookup service to find the infected system's external IP.
  discovery
behavioral1
- Target
  cert.txt
- Size 177KB
- SHA256 a75561a3224d9f836058a6d0204ed2e6c1f638275a59495935cd2a5e46fd28ca
- MD5 ccfc0f145861f23c6850c691c4be54b9
- SHA1 b88ac887493f31cf9f160ddbc6bc3a2aa298a0ca
- SHA512 6c2b3f700cf2b88d37cc0f1fc1cd33708d7aef344a58634d3f01a1f0c5c0a786825fbe779bf5315fc520edb5cc85409854e7cf6d8b662eb9106ffaecd7e7e801
- SSDEEP 1536:y6huLAUgg2x/NbW/w5XcuMcGlQg0TX0M5qllHhOu85YNNM+095F9gR4RA+hckK+9:1hucU+Jv5klHJf01O4Wc
- TLSH
  T10D049796518D5CBEE7D7C190DC8BACAB35B380D4078E364B0F50D0A536E1766DACF88A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

execution
behavioral2
- Target
  util.exe
- Size 742KB
- SHA256 e227d47facf0e2f5b9e5c54a23a86b31272696b64bbbb9932a31fe06973677bd
- MD5 7a59df9ee2ae38c391b60c001d8fef11
- SHA1 a5fa49ca3da03fb01f2a96fa99521f263665f9ff
- SHA512 8237b3fd2a41a08bfb8ca95060e1a7f8b030538d587746b1b050d1ce0f2a6f4898ff31e65243c97e6b343a8112159839cfa85f47ecffc20a621dac64cf947b7a
- SSDEEP 12288:PFsr3uNFZnKsXrLdiu7c7nu86VDfU/+tZxMUJ4EBiSxsyYA:PFs4FZnKsrLdiCUMs/KiesyYA
- TLSH
  T184F4BF81B6D381F3D992117148B9A77A0E3D6D1007259CEB83D43AF68D346C0AF776AE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

3^/10

discovery
behavioral3