General
- Target chp.exe
- Size 33KB
- Sample260909-x77y5sam5t
- SHA256 dc12c6b2043341198c2f43cbf8fa03a2b378b143bd89b510e55790ba5c8fba24
- MD5 e58e472390ddaec39d6ceab25e65ebaa
- SHA1 78a86bbba28bb3b05befb027f83ed107bd557a72
- SHA512 e91709ce9353bf634c7d4e45f111b6a9a53d6286cb1048b49bb6cb772d9eb52cf04eca6b5f0dc738a9e0a1098daf86819ab133d90f20790da8a473270f2c2a04
- SSDEEP 384:XXo2HDWj1ycoPBzpKrkXXESI6ZiZ0OonMSdxvwkZUysjvRuZoijtBKYkOlCtNRuk:Hf//tZiSOOfakZlsjeEYtQpG3fB
- TLSH T19FF2A71ADD27A06BD39E8D74CA134D05DE72BCC6DBD1B6CB67410CE20DA5A949F3E202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
chp.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
chp.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target chp.exe
- Size 33KB
- SHA256 dc12c6b2043341198c2f43cbf8fa03a2b378b143bd89b510e55790ba5c8fba24
- MD5 e58e472390ddaec39d6ceab25e65ebaa
- SHA1 78a86bbba28bb3b05befb027f83ed107bd557a72
- SHA512 e91709ce9353bf634c7d4e45f111b6a9a53d6286cb1048b49bb6cb772d9eb52cf04eca6b5f0dc738a9e0a1098daf86819ab133d90f20790da8a473270f2c2a04
- SSDEEP 384:XXo2HDWj1ycoPBzpKrkXXESI6ZiZ0OonMSdxvwkZUysjvRuZoijtBKYkOlCtNRuk:Hf//tZiSOOfakZlsjeEYtQpG3fB
- TLSH T19FF2A71ADD27A06BD39E8D74CA134D05DE72BCC6DBD1B6CB67410CE20DA5A949F3E202
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.