General
- Target Discord-Toolkit(v-11.290015).zip
- Size 14.0MB
- Sample261101-2v83wsdx5x
- SHA256 4ebdf207ca70a2c605ccce5e54f4dab2b11e4f8b5f75eb35eb2315c3970e4c4c
- MD5 d4171921b1ba390833da304d45d8f11f
- SHA1 23505601033ef4b19c3e9af1bd6a56b36abbf539
- SHA512 b5ecdaaa5d52dafbf17a081885001f1d3f590a062ef0386fdee26ae8bcf54c74a6ee48caf51161ce5b789cda3d66185445290ad408107de01bdac6842455a60f
- SSDEEP 393216:gZIk2ob6g3cABP8y/N26rU60FF7+xwnMyGhrS:y1LBPFA60FJ+GnlGZS
- TLSH T14EE6338550EE9406FAE8B97058535F66FC25F05E68F03B020356884A39F9B93B7F2DD2
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Torus.exe
Resource
win10v2004-20260911-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Torus.exe
- Size 11.5MB
- SHA256 f70935ce6d8260e64682a461c3f6fc7864c7f24158ff382a0ed8de51a738504f
- MD5 c3587a0b3ce0330672c4fa2269b44bd8
- SHA1 5c4fd2e62c399c0f8ab039909a9efc10928d7f8a
- SHA512 3f95f0eac7b45da01aad00243a3ff82369b2e4983dfb4a91b1d571810c0bd2aadc6bce7717c5e62d06395ca197397a642a087860328daaad18d6ca8bdecb5e25
- SSDEEP 98304:1r5eVVoeJuzOmvZoAcBc1rSFlYfuweYjKd2+zAP/B4OQExMWN7E0ceC9oopERFX4:zOmvZrcW1GlYWwzjKCo2RFXyRJl
- TLSH T1FBC65A5373705012FFB1F0B54CAA8615EF7AB9D76710A293301DC6692FDBEE19DA8208
- MD5 SHA1 SHA512 SSDEEP TLSH
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.