General
- Target MINI PACK FOR DUMPING BY @k45t0_0.zip
- Size 51.1MB
- Sample260831-2ds1casxcw
- SHA256 43ff7fd739d58bac51865df42e49aef8bf757c0e090f0c3129c307d1d8561b1d
- MD5 35301bc5c5e01351c22e7c7e1130375d
- SHA1 9fb4cd9e8eda199b45392d5f030fb328cca81c4c
- SHA512 289e50700e546fb52cbb5ec3da978c677b1f04b1f489656b2068626399e4018942939df849a19dff9cb9172f51d1247cadc9a977070d749749b1227040a5f556
- SSDEEP 1572864:90SGM5wPoy+5PtmGMnrELab5wq6Ioep6Ypf+PNT:9GYLy8mAmqpIoi5pfQT
- TLSH T108C73331D5C30785B4CBC3F1B7F04AA02845DA86E6A5D1E2C7847F0F7BC6C92D666A98
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
MINI PACK FOR DUMPING BY @k45t0_0/SQLi Dumper v10.3.zip
Resource
win11-20260513-en
17 signatures
900 seconds
Malware Config
Targets
-
- Target MINI PACK FOR DUMPING BY @k45t0_0/SQLi Dumper v10.3.zip
- Size 5.3MB
- SHA256 c5540831066a6ec585282a5a1626adc70854f977ba0b85c77e519ff814ef9483
- MD5 5a776763b598d1ede54feac4fc369116
- SHA1 e7f11396bdd55e5e66f7e9cb11d6c348ff20d6ee
- SHA512 be33991a421545f492dc898dd68190c4087b074cf43b3bd654e2dd5b0efcd14f6cc71a574d097f97f9f37ba9a27220156c2251a72775017af3bd4abb2da839c0
- SSDEEP 98304:GEJdnzp6aP7v2K29E2VdqqBxx/1VLdOBOrCTu3u7w9TdOxOWDHrRwFqv+7X8UgOx:xnI+u4Ypxx/1VLgu+7w9TdOxO4FwFN8c
- TLSH T137463311E2F809C115BF3CB66C8379314CAA96584C7542F8CEEEF70ED2A58D0EE5974A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.