General
- Target ZD1MG9T7EK.exe
- Size 630KB
- Sample261003-vb61vst1gt
- SHA256 ac0589681d043d0efd5c199c805891fc8812754a479feaca1224dacf99f08670
- MD5 8fd63d76cd25095bc9da69b7758bf134
- SHA1 207d4fce707c88fc33fb11adbbacdbebe3189219
- SHA512 a66790689461358e37577c55c43c650c51cb8d2e466b6e2d0578f79dfd65abd9a4733eb43fe9b68c2304a7faa5b7d1475c461a45cf34b0c6a0a3a29fa7a84735
- SSDEEP 12288:6XZsou8o5+GA9UhAE+bY7KnC93afR+kAuOivCYdHZ:SkU
- TLSH T11ED4AD1026BA707FF063CE964EE9FDB589FDF523660B71B51050921A8772E46CC8C8B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ZD1MG9T7EK.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target ZD1MG9T7EK.exe
- Size 630KB
- SHA256 ac0589681d043d0efd5c199c805891fc8812754a479feaca1224dacf99f08670
- MD5 8fd63d76cd25095bc9da69b7758bf134
- SHA1 207d4fce707c88fc33fb11adbbacdbebe3189219
- SHA512 a66790689461358e37577c55c43c650c51cb8d2e466b6e2d0578f79dfd65abd9a4733eb43fe9b68c2304a7faa5b7d1475c461a45cf34b0c6a0a3a29fa7a84735
- SSDEEP 12288:6XZsou8o5+GA9UhAE+bY7KnC93afR+kAuOivCYdHZ:SkU
- TLSH T11ED4AD1026BA707FF063CE964EE9FDB589FDF523660B71B51050921A8772E46CC8C8B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Adds Run key to start application
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
MITRE ATT&CK Enterprise v16
Persistence
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1Privilege Escalation
Boot or Logon Autostart Execution
1Registry Run Keys / Startup Folder
1Scheduled Task/Job
1Scheduled Task
1