General
- Target Network_Toolkit_1.17.148_Update.zip
- Size 7.7MB
- Sample261102-jm8s2sat2p
- SHA256 3f5c77eb4344ef398e8534991197b0ae2d752e20b7ba2fa190dad6967922c45f
- MD5 ab4226bf128f85b4f49412fdf732c23a
- SHA1 ab25a4dd6bedf680311d96fabfcf1729dacb462b
- SHA512 d803803f79939a85e2384a49801a79e887686a29bfcc8b18d3814be12e9a4ee9c4d261351ff79f8d54fd0ae86bcba6e9336151b443e6e0a6c9854b7346b4aa0b
- SSDEEP 196608:Wyv+CbR7mhwxhgpYfpbatTlaMCS91sfC9EN+WvqsZyQ/Ez:lbR7mhnp4M7AvqsZ5Ez
- TLSH T15286335862B04F03D989440EEE46A6663412A65CDF2E533772DC3BE5D4B814AB9CF3CB
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Network_Toolkit_1.17.148/Network_Toolkit_1.17.148_Windows_x64.exe
Resource
win10v2004-20260911-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
Network_Toolkit_1.17.148/Network_Toolkit_1.17.148_Windows_x64.exe
Resource
win11ltsc2024-20260911-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target Network_Toolkit_1.17.148/Network_Toolkit_1.17.148_Windows_x64.exe
- Size 20.1MB
- SHA256 84433846e7b508307fae225e3b86ad2b628191c8d476e2aa9833b043408a12d9
- MD5 604f1c6813a415db02e0057847c536c4
- SHA1 14c5ff6633d90d090fc7d607a6fe8d64d4e28a35
- SHA512 00ccc15db3f3426e317552425c401a950aa50af8f3c0f9d00d5afd03b2aadcb1320a3c4b96a807f5f91cf33da5c697a471a29c6e70b261c026a621bf48f0c463
- SSDEEP 196608:3aGY0qvnl/p4nP8G4tzm7qOrV371oargU9/Q:3/qvnl/mkG4tzmxh371oarj/
- TLSH T181279D53F96920E5C1AEC171C5738202BB713C48672423D76B64EAA43F77BD06EBA724
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Checks whether UAC is enabled
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
Obfuscated Files or Information: Command Obfuscation
Adversaries may obfuscate content during command execution to impede detection.