General
- Target a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0
- Size 885KB
- Sample261002-q192la1tex
- SHA256 a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0
- MD5 b92a1ea2dac84a51773a53077c7f825a
- SHA1 452cacb3015ac885d933a14cae082274e6655b5e
- SHA512 60e24e4861165b8097f13da0a7b3abc9403ce2aec2ce208f4070e860d090bb6212ca5672e28f5aa2c36a7ff7684a73a53c5a95d7549d19efc97855f59a6e8f67
- SSDEEP 12288:dNKWniw1HrOgEAdCJuRr5gbveB7quPiW/0LwfSnSls5:dNKuiiVEAYJGG7elnKWU
- TLSH T1D1158E2BBAA401B5D4B7C07CCD636517EAB1785A03719ADB03E08AA93F277E0467F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0.dll
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0.dll
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
existrat
C2
-
82.197.70.119:27063
Targets
-
- Target a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0
- Size 885KB
- SHA256 a4f5aac004626bcc71ba94695ed4445825cd81382121ea959c0df69c0ae02ae0
- MD5 b92a1ea2dac84a51773a53077c7f825a
- SHA1 452cacb3015ac885d933a14cae082274e6655b5e
- SHA512 60e24e4861165b8097f13da0a7b3abc9403ce2aec2ce208f4070e860d090bb6212ca5672e28f5aa2c36a7ff7684a73a53c5a95d7549d19efc97855f59a6e8f67
- SSDEEP 12288:dNKWniw1HrOgEAdCJuRr5gbveB7quPiW/0LwfSnSls5:dNKuiiVEAYJGG7elnKWU
- TLSH T1D1158E2BBAA401B5D4B7C07CCD636517EAB1785A03719ADB03E08AA93F277E0467F711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.