Analysis
- max time kernel
150s - max time network
149s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/09/2026, 09:26
Behavioral task
behavioral1
Sample
52896134154dd284798acfed00b17a5d631a75a969661e1f9a8809e0ccbfdc99.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
52896134154dd284798acfed00b17a5d631a75a969661e1f9a8809e0ccbfdc99.exe
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
General
- Target 52896134154dd284798acfed00b17a5d631a75a969661e1f9a8809e0ccbfdc99.exe
- Size 1.7MB
- Sample260910-lepfjsan3y
- SHA256 52896134154dd284798acfed00b17a5d631a75a969661e1f9a8809e0ccbfdc99
- MD5 35c96ce3b20df965c7a1b4140ee016e6
- SHA1 daa4c3693358c3fc30a93e69c71b29eb91500954
- SHA512 6809d443a777ede162fb3b7d869502b7ae49f5c9e566e5788052f73efc960c9fb232e855955aaf436b04905f452b2d62bd0bc828ab5f1f568d1a3e6f36a64190
- SSDEEP 24576:ipYJZPnwGr0Ym+L5JJ0CJCTNH6FBCJgutQ/3+HpMwO5oQwIRG7A/YMFs5ovYLMty:aHGQYlF0CuNH6FkZQ2U5A7A/Yhuv
- TLSH T198858E17A3A401FCD0A7C278C9565607EBB1B4091770ABDF1AD086E66F63AE11F7E321
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Malware Config
Signatures
- Looks up external IP address via web service 1 TTPs 6 IoCs
Uses a legitimate IP lookup service to find the infected system's external IP.
flow ioc 16 checkip.amazonaws.com 21 checkip.amazonaws.com 26 checkip.amazonaws.com 31 checkip.amazonaws.com 1 checkip.amazonaws.com 5 checkip.amazonaws.com