General
- Target 6a39aa03c74fe620.bin
- Size 3.3MB
- Sample260907-s92spaytas
- SHA256 6a39aa03c74fe62099056e7c565a729448899bab9de7f56331546e0a5435f4aa
- MD5 907353c364be783f487453d803bd53f0
- SHA1 630ebb9e3dca395046a3a1672d314960f0d426ab
- SHA512 1465e7efcb9f58d53aa9c682449a1d9e67dd3ffc65d662f59c365f86817b601945fde2588bb8cb6b5a5cca3eea13bb719e00f6fdae1b3210b8a53d989409a4b1
- SSDEEP 49152:ZZd/CpOWVi5tjFzaCf5UODNtJm5pcM9isYMv29JEHE1D03NCJP:ZVtjNaCRNtJkpcM8Rh9oQ0dQP
- TLSH T167F50263F6D400E9D437D535CA639823FB7378169F205ACB13806A561E676C89F3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a39aa03c74fe620.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a39aa03c74fe620.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 6a39aa03c74fe620.bin
- Size 3.3MB
- SHA256 6a39aa03c74fe62099056e7c565a729448899bab9de7f56331546e0a5435f4aa
- MD5 907353c364be783f487453d803bd53f0
- SHA1 630ebb9e3dca395046a3a1672d314960f0d426ab
- SHA512 1465e7efcb9f58d53aa9c682449a1d9e67dd3ffc65d662f59c365f86817b601945fde2588bb8cb6b5a5cca3eea13bb719e00f6fdae1b3210b8a53d989409a4b1
- SSDEEP 49152:ZZd/CpOWVi5tjFzaCf5UODNtJm5pcM9isYMv29JEHE1D03NCJP:ZVtjNaCRNtJkpcM8Rh9oQ0dQP
- TLSH T167F50263F6D400E9D437D535CA639823FB7378169F205ACB13806A561E676C89F3BB22
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Suspicious use of NtSetInformationThreadHideFromDebugger