General
- Target 18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47
- Size 5.7MB
- Sample261008-r5f5raywhy
- SHA256 18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47
- MD5 fc5490e85cfbe0f2a8e801dc76512920
- SHA1 12f09dc9e9b44224c28f551f1f3558f099db5736
- SHA512 9247370cad61aed7f88f065713a8c90d023d3308c0b6d302623f8f745498e2acc37a73e67487f4002907091357d6134fe6fcd1634acdf741da55ae82e517558a
- SSDEEP 98304:P+OYZtTgr9gw1kn8wbnazS2iT33EI5pYolng+QZCZFgZ:EZtTaib3LbgfZi6
- TLSH T1E7565C16F25610EDC07ED174830AA232FA71B84957347AEF4AD09B212F62FE05B7E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
winlol
C2
-
http://workinghardo.link:80
xor.hex
Targets
-
- Target 18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47
- Size 5.7MB
- SHA256 18868595393c5345e99ebe6dbfe60780aef388836b125696a3201f1a88e67c47
- MD5 fc5490e85cfbe0f2a8e801dc76512920
- SHA1 12f09dc9e9b44224c28f551f1f3558f099db5736
- SHA512 9247370cad61aed7f88f065713a8c90d023d3308c0b6d302623f8f745498e2acc37a73e67487f4002907091357d6134fe6fcd1634acdf741da55ae82e517558a
- SSDEEP 98304:P+OYZtTgr9gw1kn8wbnazS2iT33EI5pYolng+QZCZFgZ:EZtTaib3LbgfZi6
- TLSH T1E7565C16F25610EDC07ED174830AA232FA71B84957347AEF4AD09B212F62FE05B7E719
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10