General
- Target triage.exe
- Size 111KB
- Sample260828-3mfxtaed57
- SHA256 b3d18e3d9ffb8eead022772418640a67a948ab0d0009aef1bfdd90fd8fe5435d
- MD5 39af575da3d5b53e6346249337b96c8e
- SHA1 2edf0f28ce35e69ad33c7bb0298622a867a5f448
- SHA512 71b79d78ea0d50b7508ae727b19113a7171acbc35ace6c83d3175fc5f0690781500fa74c6222a4f52555fba5ae82710835c5ead50ea07acc5961e8c8995be671
- SSDEEP 1536:luBmI6ygt352FQoHljxqfHlAZ7lm6uB7dnwQvg+eZbMU7m6duJyRJFy6kIFRxxG7:GLk32FdqfFAZ6BRwQvgRMU7m6du27RuD
- TLSH T1E5B3D54177E94605F2FF1FB9A87A06110A37FD969C32C74D09A9645E0AF3B848825FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
triage.exe
Resource
win10ltsc2021-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
triage.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target triage.exe
- Size 111KB
- SHA256 b3d18e3d9ffb8eead022772418640a67a948ab0d0009aef1bfdd90fd8fe5435d
- MD5 39af575da3d5b53e6346249337b96c8e
- SHA1 2edf0f28ce35e69ad33c7bb0298622a867a5f448
- SHA512 71b79d78ea0d50b7508ae727b19113a7171acbc35ace6c83d3175fc5f0690781500fa74c6222a4f52555fba5ae82710835c5ead50ea07acc5961e8c8995be671
- SSDEEP 1536:luBmI6ygt352FQoHljxqfHlAZ7lm6uB7dnwQvg+eZbMU7m6duJyRJFy6kIFRxxG7:GLk32FdqfFAZ6BRwQvgRMU7m6du27RuD
- TLSH T1E5B3D54177E94605F2FF1FB9A87A06110A37FD969C32C74D09A9645E0AF3B848825FB3
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.