General
- Target cummersMG.exe
- Size 272KB
- Sample261006-atcvhsxdkf
- SHA256 d1f32be6a9d1bfdc0489d06224b16d99aaa641d9e7dc6faad142bde79eb09e1e
- MD5 0c5cb942faf6e983ae3b760c516fbb11
- SHA1 3894377cc0122b92aa46144222a1d0723bccd8c3
- SHA512 3da711a409bbc990d79066ecd141e6736f270473b39bfec7532add8c1075ee7dc4f52e9b624b98e5b016315ae9ef8c1e264e7fe14aca76c501bec64acbf0c3c7
- SSDEEP 6144:9UqVD6AjBOLbYEst1JMaUyOaR9wuEVQaJTvLzCv:OqVDzowVnhgn/Cv
- TLSH T10D447DA1B0C9653AE95901351E5FCB807F28F0B087EAEEEF178E4F5F0694D944D31AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cummersMG.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
koiloader
C2
-
http://5.101.82.4/sparkles.php
Attributes
-
payload_url
https://kavacanada.ca/catalog/model
Targets
-
- Target cummersMG.exe
- Size 272KB
- SHA256 d1f32be6a9d1bfdc0489d06224b16d99aaa641d9e7dc6faad142bde79eb09e1e
- MD5 0c5cb942faf6e983ae3b760c516fbb11
- SHA1 3894377cc0122b92aa46144222a1d0723bccd8c3
- SHA512 3da711a409bbc990d79066ecd141e6736f270473b39bfec7532add8c1075ee7dc4f52e9b624b98e5b016315ae9ef8c1e264e7fe14aca76c501bec64acbf0c3c7
- SSDEEP 6144:9UqVD6AjBOLbYEst1JMaUyOaR9wuEVQaJTvLzCv:OqVDzowVnhgn/Cv
- TLSH T10D447DA1B0C9653AE95901351E5FCB807F28F0B087EAEEEF178E4F5F0694D944D31AA1
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Detects KoiLoader payload