3329119906090fa8ad770cdf69e518619a4d8a5f9e6c84234a2a11e538e24e06

Analysis

max time kernel
148s
max time network
150s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
31/08/2026, 04:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
3329119906090fa8ad770cdf69e518619a4d8a5f9e6c84234a2a11e538e24e06.exe
Size 422KB
Sample260831-fehecavdnf
SHA256 3329119906090fa8ad770cdf69e518619a4d8a5f9e6c84234a2a11e538e24e06
MD5 52d97d21742e2418a4c23ccfd1b1e3d3
SHA1 4b9c9c751dc64228c82cb974a6bd4ff236b505e2
SHA512 3110357baf0930a2cc87a272737ee67d8f6dac76a016a4414a782ec303ea0d778a8d2cddcfd90269693ecccac633cf9bf81694b239559261fa19a65f0ce4e3f6
SSDEEP 6144:cM7HJcufNK99Fye+1Wm9PkFpQXB237oWVSl8txoPGzu8/AHAfhpQ0XJMo5:LrJ1NqiPkxsWs6oPWuWppQ0Xv
TLSH
T147947C29E76500F9D1A7C238CA434512EA727C4A4370EEDF13E49E661F276E09E3EB51
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

discovery

Malware Config

Signatures

Looks up external IP address via web service 1 TTPs 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
2	ip-api.com

C:\Users\Admin\AppData\Local\Temp\3329119906090fa8ad770cdf69e518619a4d8a5f9e6c84234a2a11e538e24e06.exe
"C:\Users\Admin\AppData\Local\Temp\3329119906090fa8ad770cdf69e518619a4d8a5f9e6c84234a2a11e538e24e06.exe"
1⤵
PID:5536

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads