General
- Target file_4b8d61b5a6f660b5.exe
- Size 2.4MB
- Sample260827-ajnt2afh43
- SHA256 3f96a6e9f20241b149ebbc91f9e22f69722515e79bcbbc3c002fc2364f5e80b0
- MD5 5ad1ea30a3026b02128db8ff57516aa3
- SHA1 3bd292a3abcba42034842f2e6361ce285bc7d779
- SHA512 f864e23792701d2de3e9691382c8682f14fc657d6bf8917cb32f24e32877ddcde01e33b05b05218d828efab5c32c218ff75cf5f2306b250b4c0accd6072e7f53
- SSDEEP 49152:/NBFA/JYDRinDkJ/RrbN2hSQr3vO658Y0Qz+VoMm2QAaFCK:8qBJZrk0of1L
- TLSH T110C5595E40189378F7AAC4E9850E7A4130F93BBC8DF290A8251B49B15B657E0DFD3B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
file_4b8d61b5a6f660b5.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
file_4b8d61b5a6f660b5.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target file_4b8d61b5a6f660b5.exe
- Size 2.4MB
- SHA256 3f96a6e9f20241b149ebbc91f9e22f69722515e79bcbbc3c002fc2364f5e80b0
- MD5 5ad1ea30a3026b02128db8ff57516aa3
- SHA1 3bd292a3abcba42034842f2e6361ce285bc7d779
- SHA512 f864e23792701d2de3e9691382c8682f14fc657d6bf8917cb32f24e32877ddcde01e33b05b05218d828efab5c32c218ff75cf5f2306b250b4c0accd6072e7f53
- SSDEEP 49152:/NBFA/JYDRinDkJ/RrbN2hSQr3vO658Y0Qz+VoMm2QAaFCK:8qBJZrk0of1L
- TLSH T110C5595E40189378F7AAC4E9850E7A4130F93BBC8DF290A8251B49B15B657E0DFD3B36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.