General
- Target 3cd7838a57c130cc81af161dbb86efddb3970e41f6700fe996bb73ba96858bf6
- Size 2.4MB
- Sample260825-lr74eswxa1
- SHA256 3cd7838a57c130cc81af161dbb86efddb3970e41f6700fe996bb73ba96858bf6
- MD5 1a6c0dc7780cb528b6a948f670cb7941
- SHA1 4f38f1514e93562f11481dd78c8911942fc976ca
- SHA512 a5cb15ce31bcb7de15c54cdf26a88e6d2b5ace03a4352db6f18b4526dbc8af18a3415078f6a8c6d8e41c2c164a484f7179697a4fe20678cf7923810817efe8b0
- SSDEEP 24576:zXgIqS41aa/xCJJY4WFi/DpCARH6R+mvgZ56fFwlb7dqWWa:jggC5OY4WKprRHi++Y6GzZWa
- TLSH T1AEC5671F73896F0C3BA4FB869D6224808781F61A47549F606B63CF27BFD0B8991B4791
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
flower.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
flower.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target flower.exe
- Size 561.5MB
- SHA256 ee48cab95c1b561e0a72e44602d55e14912e4f7e3ba20ea30b16fec1a6498283
- MD5 e6801d2cbda19402fe15cdb566e64e06
- SHA1 45c809d878c0fd3b285a41a89ccf6e765d1a11d1
- SHA512 b068c9945933a814c90855258bf50f9aa058fbb14ea42fdcb974ff3049d60e90f8654db951a83e3a491ab9dcba10c4d4fefef02b4c09331ee0312418910fe7fd
- SSDEEP 24576:UvRPld6D/iJrVFSfI09ZvBuGOkQ9EquMz2a0sQrQDGz2yRafYyaKbjtkT7gw4oP7:UFldPt1OEbz4sQrGfau6PE9hvBp82oB
- TLSH T12A5900228576C9CEC1D50792DA45C4A7A33BE3B83793BA7BB604DC0A9544E204FF537A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.