General
- Target 48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9
- Size 214KB
- Sample261029-1a5pass1ew
- SHA256 48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9
- MD5 b0396656a3b7968a8a8adca462e498b7
- SHA1 4fa2878b80116e5fccbb5d48c580eea8eb402c2e
- SHA512 f4bc845f6db4dd3ac34def5845f9e0a7b9da4f30e69ab21846ade82c21433c7b603d259e7941296e42ae67bef19f8092df4e13199b48bbe4ff6354cc7b59d917
- SSDEEP 3072:SzIjT9hxqm1inJYxGcvcqBElY1Ju48kS4GC6v0J6Yzrm9jf50k:BhxqmLN0qOlP48uqR0
- TLSH T10E248D49B3A50CF8D4B78139C962465AEB7378450350EBDF07A0867AEF236D06D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9.exe
Resource
win10v2004-20260911-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9.exe
Resource
win11ltsc2024-20260911-en
1 signatures
150 seconds
Malware Config
Extracted
Family
-
valleyrat_s2
Version
-
1.0
C2
-
127.0.0.1:6666
-
127.0.0.1:8888
-
127.0.0.1:80
Attributes
-
campaign_date
2026.10.30
Targets
-
- Target 48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9
- Size 214KB
- SHA256 48631e0f414e360964698177be5aab6a9e96ebd536d2d05f8a204efbd30175a9
- MD5 b0396656a3b7968a8a8adca462e498b7
- SHA1 4fa2878b80116e5fccbb5d48c580eea8eb402c2e
- SHA512 f4bc845f6db4dd3ac34def5845f9e0a7b9da4f30e69ab21846ade82c21433c7b603d259e7941296e42ae67bef19f8092df4e13199b48bbe4ff6354cc7b59d917
- SSDEEP 3072:SzIjT9hxqm1inJYxGcvcqBElY1Ju48kS4GC6v0J6Yzrm9jf50k:BhxqmLN0qOlP48uqR0
- TLSH T10E248D49B3A50CF8D4B78139C962465AEB7378450350EBDF07A0867AEF236D06D3EB61
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10