General
- Target WindowsUpdate.exe
- Size 57KB
- Sample261027-rl5c8sdx31
- SHA256 c6968a0c9be5844bb63ee816be28c61c0655763229c43dcd734d4653c3ec98cd
- MD5 67279132745f464ace06cec5f175b92f
- SHA1 24b58cd4dd3cb6f83b35d2ccb281c6723a503a45
- SHA512 90811de004d09e8af89149b8dccaecdd1bab34ae284fbb81fd7d0b7ffea2db756371437ad57cf31611fad895649a24d309b12183f006c10f29c767325e1e66f5
- SSDEEP 768:n+9uOOOka25B9CM+f3h7GdzM2puBKEOsRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRg:n+93hkv5B0HkzvuAOjZOjqz
- TLSH T10243090AF603A4ECC866E274EAE66732EF61B85501343B3F6790CF315E54A466E2CD46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
WindowsUpdate.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WindowsUpdate.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target WindowsUpdate.exe
- Size 57KB
- SHA256 c6968a0c9be5844bb63ee816be28c61c0655763229c43dcd734d4653c3ec98cd
- MD5 67279132745f464ace06cec5f175b92f
- SHA1 24b58cd4dd3cb6f83b35d2ccb281c6723a503a45
- SHA512 90811de004d09e8af89149b8dccaecdd1bab34ae284fbb81fd7d0b7ffea2db756371437ad57cf31611fad895649a24d309b12183f006c10f29c767325e1e66f5
- SSDEEP 768:n+9uOOOka25B9CM+f3h7GdzM2puBKEOsRWRRRRRRRRRRRRRRRRRRRRRRRRRRRRRg:n+93hkv5B0HkzvuAOjZOjqz
- TLSH T10243090AF603A4ECC866E274EAE66732EF61B85501343B3F6790CF315E54A466E2CD46
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.