General
- Target f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2
- Size 3.4MB
- Sample260908-dc6m2sbq6s
- SHA256 f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2
- MD5 ebd218b8c630cc5c026101ff3f823523
- SHA1 5b41892689da54f3f678d10ea0baa8e8c158c954
- SHA512 b2bed04bd4a9034ddd2c510e0b380f72e3a835e4c902d9696a74251390fbb408e05c18aebc76ebdeb5de9640e74b7f798b95195b33e7fb06abc25d5c5abbac0d
- SSDEEP 98304:aBn3Couqrj42zp95+BEO7zZZwnW5LLl0dF:mS+5MzZZw60dF
- TLSH T1CEF5CF02A7808072F5AB0671D97A6B3B493EBE11133499D783C03D5A4DF15E1BB3AB5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2
- Size 3.4MB
- SHA256 f4bd279330b23ec0b48d82e43d51f2a00e8a64e02a8a964dac34fdc5e30b64d2
- MD5 ebd218b8c630cc5c026101ff3f823523
- SHA1 5b41892689da54f3f678d10ea0baa8e8c158c954
- SHA512 b2bed04bd4a9034ddd2c510e0b380f72e3a835e4c902d9696a74251390fbb408e05c18aebc76ebdeb5de9640e74b7f798b95195b33e7fb06abc25d5c5abbac0d
- SSDEEP 98304:aBn3Couqrj42zp95+BEO7zZZwnW5LLl0dF:mS+5MzZZw60dF
- TLSH T1CEF5CF02A7808072F5AB0671D97A6B3B493EBE11133499D783C03D5A4DF15E1BB3AB5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Defense Evasion
Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1