General
- Target CodeX.exe
- Size 3.2MB
- Sample260822-zz7phstzct
- SHA256 2862de07527f21f4deff608c3aa158fdb4966dfb1d8fa2d45b17ba5cae2e8b4c
- MD5 f3ef3e06dd774943d16a965004c52e6b
- SHA1 c7b03fd4e1e9739e1f6331b2b795fa90e7d2d9f3
- SHA512 82c37e659e0cf37cadcea908f2838121e3d61eaa45b93bdb0993c2398ae2b4b0b10ee1e16c36f7c9d6973906b6b5bb84dedbd892a2bdd86f20babced7c78dbc2
- SSDEEP 49152:MFLLRf6UAnOE9fQHLY6PCHYTz+71zgd1+Q32QGGDcLOIDAnOE9QtL0jp:qF7AnOE9O+7RGG/FAnOE9Qt
- TLSH T132F5E011F642C232D19602B59BB8FF73157C6E21176036C7BBC85DADAE705C26AB1B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CodeX.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
CodeX.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target CodeX.exe
- Size 3.2MB
- SHA256 2862de07527f21f4deff608c3aa158fdb4966dfb1d8fa2d45b17ba5cae2e8b4c
- MD5 f3ef3e06dd774943d16a965004c52e6b
- SHA1 c7b03fd4e1e9739e1f6331b2b795fa90e7d2d9f3
- SHA512 82c37e659e0cf37cadcea908f2838121e3d61eaa45b93bdb0993c2398ae2b4b0b10ee1e16c36f7c9d6973906b6b5bb84dedbd892a2bdd86f20babced7c78dbc2
- SSDEEP 49152:MFLLRf6UAnOE9fQHLY6PCHYTz+71zgd1+Q32QGGDcLOIDAnOE9QtL0jp:qF7AnOE9O+7RGG/FAnOE9Qt
- TLSH T132F5E011F642C232D19602B59BB8FF73157C6E21176036C7BBC85DADAE705C26AB1B0B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.