General
- Target sutbongtvv.io_sn.exe
- Size 27KB
- Sample260905-mnes5ssepf
- SHA256 74cea26d348f5c1691dec96991a1b6d4628525abb36d289b1e89012b5015cd07
- MD5 e5d24018e9edcb18f8d8b542d84776bc
- SHA1 2048451c1db54db6b964d75a6e5935af70f91a40
- SHA512 6ff0c994bb5eb1d6b62a2b83b7692f3fe94619cd9208f51fa52e5673550df7126468b3f7cc0989f0bdf9b143237793d543316d248c2f7583091f9b37f55a758a
- SSDEEP 384:rOyjHiZsPiz8JJJ+lh1nv+mKRogEhOUzni3GE6aW49yeb6mhRhoH7h+coL3qT94F:BCMiz8JylkP2OUzg19NhRhm7hUaT9o
- TLSH T1D6C2B40473F80715F0FE9B7EADB112118672B9679D32C79E0AD550CE1A327848AE1B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sutbongtvv.io_sn.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
sutbongtvv.io_sn.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target sutbongtvv.io_sn.exe
- Size 27KB
- SHA256 74cea26d348f5c1691dec96991a1b6d4628525abb36d289b1e89012b5015cd07
- MD5 e5d24018e9edcb18f8d8b542d84776bc
- SHA1 2048451c1db54db6b964d75a6e5935af70f91a40
- SHA512 6ff0c994bb5eb1d6b62a2b83b7692f3fe94619cd9208f51fa52e5673550df7126468b3f7cc0989f0bdf9b143237793d543316d248c2f7583091f9b37f55a758a
- SSDEEP 384:rOyjHiZsPiz8JJJ+lh1nv+mKRogEhOUzni3GE6aW49yeb6mhRhoH7h+coL3qT94F:BCMiz8JylkP2OUzg19NhRhm7hUaT9o
- TLSH T1D6C2B40473F80715F0FE9B7EADB112118672B9679D32C79E0AD550CE1A327848AE1B7B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger