General
- Target 486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da
- Size 4.4MB
- Sample260922-lnhdlashqd
- SHA256 486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da
- MD5 498b2e9f04e92682aea59888ddccdcb1
- SHA1 909968f94cac6fe2b729fb9bcbe423a3d983dac0
- SHA512 044e5e1cecd2e040f5d6e4837b71a949385d3da453989c2d4281b45eebdbf5c7fff613abac3cd575253bbd0d3914a99be64d6ff6b6ed12b8bbd6e712e21bdaaf
- SSDEEP 49152:ZsX86bhPHHFJiAQ3v1TonH2neZ5bkU5a50Lhe+jJLRUg37+uhOqNJvJdcEcEEI2I:Z+JiAC1snH2neZ5QR50YwNSdZwt7Tzl
- TLSH T19426AE46A2A640EDD167C038C62B9A13E6753C2D03905EFB57D096616FA3BE07E7F312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da
- Size 4.4MB
- SHA256 486af893a65b0bfd676271ccac76e06437fafe2f520792c3fc3a84d113cf96da
- MD5 498b2e9f04e92682aea59888ddccdcb1
- SHA1 909968f94cac6fe2b729fb9bcbe423a3d983dac0
- SHA512 044e5e1cecd2e040f5d6e4837b71a949385d3da453989c2d4281b45eebdbf5c7fff613abac3cd575253bbd0d3914a99be64d6ff6b6ed12b8bbd6e712e21bdaaf
- SSDEEP 49152:ZsX86bhPHHFJiAQ3v1TonH2neZ5bkU5a50Lhe+jJLRUg37+uhOqNJvJdcEcEEI2I:Z+JiAC1snH2neZ5QR50YwNSdZwt7Tzl
- TLSH T19426AE46A2A640EDD167C038C62B9A13E6753C2D03905EFB57D096616FA3BE07E7F312
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Drops file in System32 directory