General
- Target built.exe
- Size 785KB
- Sample260825-svflxavbpf
- SHA256 3162d37dfcfbbb443debb7cf4538467ff071ba745257662f61fef3a278870d8d
- MD5 4cdca35bcf51dd91bae6154c8b9254b7
- SHA1 d4e15307311554e2805cb18209b544758df48332
- SHA512 7956bf864d3b227d077c4ee8627575ef73309f2cbb9ab2f2ed6a5c5014f48bed88bd663c41ef4e6705a4231b618f16e4cbdc55b3a8c072755c37a8c8f2c20e75
- SSDEEP 12288:AA9FqTaoB2Z+80Nax9YXkZi6zdhg+XtDtlQ8dEZy:neTaoxN+9DEAh9
- TLSH T1DC05A56A7B828F49E065683DCCCD3321D7A51FF32333A34B3B086714168A5CA9D5A7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
built.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
built.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target built.exe
- Size 785KB
- SHA256 3162d37dfcfbbb443debb7cf4538467ff071ba745257662f61fef3a278870d8d
- MD5 4cdca35bcf51dd91bae6154c8b9254b7
- SHA1 d4e15307311554e2805cb18209b544758df48332
- SHA512 7956bf864d3b227d077c4ee8627575ef73309f2cbb9ab2f2ed6a5c5014f48bed88bd663c41ef4e6705a4231b618f16e4cbdc55b3a8c072755c37a8c8f2c20e75
- SSDEEP 12288:AA9FqTaoB2Z+80Nax9YXkZi6zdhg+XtDtlQ8dEZy:neTaoxN+9DEAh9
- TLSH T1DC05A56A7B828F49E065683DCCCD3321D7A51FF32333A34B3B086714168A5CA9D5A7D6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory