General
- Target ClickslutV2wU.exe
- Size 962KB
- Sample260827-xkn8hszenc
- SHA256 1b0796e08e15c24e162752368f3a5b4181f255bfd11500d81b258b94d0552ec6
- MD5 427f703786c6885d6eef5cd1311de4ce
- SHA1 44900361fe9e751df32b6c95fc62b99e44601157
- SHA512 aa6ca1ef2d4e06b5c268de45c4e9a49bed25a53a885d614518ac4c348af8b4ab9618b237c021e9f3784a11337ce55065924b54bdcf96c48f3d191434f03010fb
- SSDEEP 24576:QU+9XNrenyktDLdYNtcdvQNC9wHAP5c1gf6+mR0y:G5OVeyff6d
- TLSH T140257DA2E24948E7EC5033B44076EF764533B7B9277456CB66B93C36A9732C31C3924A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ClickslutV2wU.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
ClickslutV2wU.exe
Resource
win11ltsc2024-20260709-en
18 signatures
150 seconds
Malware Config
Targets
-
- Target ClickslutV2wU.exe
- Size 962KB
- SHA256 1b0796e08e15c24e162752368f3a5b4181f255bfd11500d81b258b94d0552ec6
- MD5 427f703786c6885d6eef5cd1311de4ce
- SHA1 44900361fe9e751df32b6c95fc62b99e44601157
- SHA512 aa6ca1ef2d4e06b5c268de45c4e9a49bed25a53a885d614518ac4c348af8b4ab9618b237c021e9f3784a11337ce55065924b54bdcf96c48f3d191434f03010fb
- SSDEEP 24576:QU+9XNrenyktDLdYNtcdvQNC9wHAP5c1gf6+mR0y:G5OVeyff6d
- TLSH T140257DA2E24948E7EC5033B44076EF764533B7B9277456CB66B93C36A9732C31C3924A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Sets desktop wallpaper using registry