General
- Target 1885930c566231f695a4b1f2beb26adae0a4c065a45fe5e545fe8ea0ba6d0069
- Size 384KB
- Sample260909-wbtafada88
- SHA256 1885930c566231f695a4b1f2beb26adae0a4c065a45fe5e545fe8ea0ba6d0069
- MD5 8df6240531b96f5ba7e5a3d7c5257192
- SHA1 0a8ee86a59635f75ada9d5878c9366daeb1fe879
- SHA512 b4eae8988d76f69ad725fc2b5e3efd464eb540698527a6e2b318d4c5d539f22596d2f4eecd6005524ced43e807565b62b2012bcbabd312a2bda74b094a88537b
- SSDEEP 3072:n8C5dwm95uKj6SIXMtP5thn2AFEHzuFQPcVvVVnqT0OLR9svel1YW:+kYKj6SI8tRH2AFEHzuFQcvXy91
- TLSH T1A5846BD5B452F099DAA3D3725A04BABEB7769E263F023C0B738C37CDC53619A4970984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1885930c566231f695a4b1f2beb26adae0a4c065a45fe5e545fe8ea0ba6d0069.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1885930c566231f695a4b1f2beb26adae0a4c065a45fe5e545fe8ea0ba6d0069
- Size 384KB
- SHA256 1885930c566231f695a4b1f2beb26adae0a4c065a45fe5e545fe8ea0ba6d0069
- MD5 8df6240531b96f5ba7e5a3d7c5257192
- SHA1 0a8ee86a59635f75ada9d5878c9366daeb1fe879
- SHA512 b4eae8988d76f69ad725fc2b5e3efd464eb540698527a6e2b318d4c5d539f22596d2f4eecd6005524ced43e807565b62b2012bcbabd312a2bda74b094a88537b
- SSDEEP 3072:n8C5dwm95uKj6SIXMtP5thn2AFEHzuFQPcVvVVnqT0OLR9svel1YW:+kYKj6SI8tRH2AFEHzuFQcvXy91
- TLSH T1A5846BD5B452F099DAA3D3725A04BABEB7769E263F023C0B738C37CDC53619A4970984
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.