General
- Target 570708dd19b274d808bc347bb93a1abd59ecea19c6f5a70c3f8d006ae9708c73
- Size 485KB
- Sample260907-j8rfwsfl51
- SHA256 570708dd19b274d808bc347bb93a1abd59ecea19c6f5a70c3f8d006ae9708c73
- MD5 8f5fc8f8afab89348cf44712773e4906
- SHA1 a587d0de56c1528b94e41cd53e363815ccd700db
- SHA512 fc78a366815533fb9e4ecdb3951d3721cce9ef31bdeb56ea826b13f758c56b5ad07b6ba31fc14bec849b6d99573415edc0ff9768d727b32a12c843c35aa8218c
- SSDEEP 12288:mAEAb9qyXXFAp1ES888888888888W88888888888ETxyt:mC5qGV+1EVTxyt
- TLSH T1D2B417417796C079EAF64A348C6D85A7DF223D651DF1882A2D30F3CE493D982987E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
570708dd19b274d808bc347bb93a1abd59ecea19c6f5a70c3f8d006ae9708c73.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 570708dd19b274d808bc347bb93a1abd59ecea19c6f5a70c3f8d006ae9708c73
- Size 485KB
- SHA256 570708dd19b274d808bc347bb93a1abd59ecea19c6f5a70c3f8d006ae9708c73
- MD5 8f5fc8f8afab89348cf44712773e4906
- SHA1 a587d0de56c1528b94e41cd53e363815ccd700db
- SHA512 fc78a366815533fb9e4ecdb3951d3721cce9ef31bdeb56ea826b13f758c56b5ad07b6ba31fc14bec849b6d99573415edc0ff9768d727b32a12c843c35aa8218c
- SSDEEP 12288:mAEAb9qyXXFAp1ES888888888888W88888888888ETxyt:mC5qGV+1EVTxyt
- TLSH T1D2B417417796C079EAF64A348C6D85A7DF223D651DF1882A2D30F3CE493D982987E732
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.