General
- Target ValoGen.exe
- Size 38.7MB
- Sample260910-sj9qlstvhz
- SHA256 c011892294ddaf421b8aef53ff746f918f5d0351fa759a6f807a18f9e34ade5e
- MD5 c91a0c5a425e9b377a2982bbd816aef7
- SHA1 7a0a8e5ed484a21bd89b98fecdc4b50311ab7104
- SHA512 1f1d599e2955481718df30ec7aa2774906a9638d83db72210ee3dafd703bf9e0d0f0108a9ac38bbde5e545ed416816622daeeb10eb0880075a6f9874a8c09342
- SSDEEP 786432:KAx8nVaTVsIRRkgWxaRtGiCccp6cVjixgNlQnlkh2vVT2ciytr7/rVg:K2TVjR+2GKwdeWNOnlJvYciyR
- TLSH T1E6973310FB624C99DB3705FE4D8A8CFEE397FD65039106AB17B2E190DA37BE94815602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ValoGen.exe
Resource
win10v2004-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral2
Sample
ValoGen.exe
Resource
win11ltsc2024-20260709-en
3 signatures
900 seconds
Malware Config
Targets
-
- Target ValoGen.exe
- Size 38.7MB
- SHA256 c011892294ddaf421b8aef53ff746f918f5d0351fa759a6f807a18f9e34ade5e
- MD5 c91a0c5a425e9b377a2982bbd816aef7
- SHA1 7a0a8e5ed484a21bd89b98fecdc4b50311ab7104
- SHA512 1f1d599e2955481718df30ec7aa2774906a9638d83db72210ee3dafd703bf9e0d0f0108a9ac38bbde5e545ed416816622daeeb10eb0880075a6f9874a8c09342
- SSDEEP 786432:KAx8nVaTVsIRRkgWxaRtGiCccp6cVjixgNlQnlkh2vVT2ciytr7/rVg:K2TVjR+2GKwdeWNOnlJvYciyR
- TLSH T1E6973310FB624C99DB3705FE4D8A8CFEE397FD65039106AB17B2E190DA37BE94815602
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.