General
- Target OgulniegaInstaller.exe
- Size 537KB
- Sample260905-m32w8ashld
- SHA256 8abe5d31cede9bab7e04f09ff8cfce0d5eb2b18f7c4e2c7432bb328a65920cb3
- MD5 94f1f88a4a80115e8bf2db77d22d1426
- SHA1 16feae48af9d14b54cc72aa4e69496c460b1956c
- SHA512 1961c2edb387a6f02540aee49437c66c4534d97f4b6d123e97cbb755d149d1db1d8f0a449471e722f0d22693598a6c16144fd6f6eb9f080d44c1cdca5be91c09
- SSDEEP 6144:4P6j0H/9yogIvGv6g8BU3IPob6sFH0BemtsETCIFs92bSkeYe5s+1:7AH/oIzV5sFHZmpR+Eex1
- TLSH T1B9C49E17F69005F5D4A7C178CA524922EB327C4A4772DBCF17E096652E236E09E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
OgulniegaInstaller.exe
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
OgulniegaInstaller.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target OgulniegaInstaller.exe
- Size 537KB
- SHA256 8abe5d31cede9bab7e04f09ff8cfce0d5eb2b18f7c4e2c7432bb328a65920cb3
- MD5 94f1f88a4a80115e8bf2db77d22d1426
- SHA1 16feae48af9d14b54cc72aa4e69496c460b1956c
- SHA512 1961c2edb387a6f02540aee49437c66c4534d97f4b6d123e97cbb755d149d1db1d8f0a449471e722f0d22693598a6c16144fd6f6eb9f080d44c1cdca5be91c09
- SSDEEP 6144:4P6j0H/9yogIvGv6g8BU3IPob6sFH0BemtsETCIFs92bSkeYe5s+1:7AH/oIzV5sFHZmpR+Eex1
- TLSH T1B9C49E17F69005F5D4A7C178CA524922EB327C4A4772DBCF17E096652E236E09E3FB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.