General
- Target EnvChecker.exe
- Size 71.1MB
- Sample261014-anpl5adh26
- SHA256 ba28ce11da10076cafd03c4b5ed2430bb149ee0c533d3bd1159d6c8957996bee
- MD5 13dc689ca4f1b2318693b6afca338d7b
- SHA1 84a0bf5476a6bcb3e879a4e33f9c39b9ea630158
- SHA512 43859c9804bd2656360e71e7a2daef1e87207f28d1bb1c57ca15c83a7a8e9f9a3bd1afd4e8019f0dd0fdd3a2fb6befee9824d878c0fa1428c9d75a918e5f1bb6
- SSDEEP 786432:LbiIFp2a7FsKUXTjdJyFV1OH0n5fj5P14Snr:L52qFsLGFVHZHZr
- TLSH T1CCF7BF15E3D84B16D67FC27CC2638512E6B1B4821361D7CF0499EE992F63BC1AB36362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
EnvChecker.exe
Resource
win10v2004-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
EnvChecker.exe
Resource
win10ltsc2021-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
EnvChecker.exe
Resource
win11-20260911-en
3 signatures
150 seconds
Behavioral task
behavioral4
Sample
EnvChecker.exe
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target EnvChecker.exe
- Size 71.1MB
- SHA256 ba28ce11da10076cafd03c4b5ed2430bb149ee0c533d3bd1159d6c8957996bee
- MD5 13dc689ca4f1b2318693b6afca338d7b
- SHA1 84a0bf5476a6bcb3e879a4e33f9c39b9ea630158
- SHA512 43859c9804bd2656360e71e7a2daef1e87207f28d1bb1c57ca15c83a7a8e9f9a3bd1afd4e8019f0dd0fdd3a2fb6befee9824d878c0fa1428c9d75a918e5f1bb6
- SSDEEP 786432:LbiIFp2a7FsKUXTjdJyFV1OH0n5fj5P14Snr:L52qFsLGFVHZHZr
- TLSH T1CCF7BF15E3D84B16D67FC27CC2638512E6B1B4821361D7CF0499EE992F63BC1AB36362
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.