General
- Target Self-Dashboard-Desktop-Ghostfolio-Hosted-3.6.zip
- Size 476KB
- Sample261102-tba3ravwas
- SHA256 da28f467a2e0f164fc0e4aa5ef0acb83a89c1b3529c92ea498015187ec2e92aa
- MD5 f6a89360354cccde161c035258b46052
- SHA1 c8196c60b8d0d1e998c61bc550b6d8cb004a1ffb
- SHA512 7da3d18ca2783c05bf7e92093cdd83136b4cfdcfce9c6b20d98a0b8fbcc5f539311faacfc6a0b8a7fd9fc8c716e3d0b4a88a1dd2a3985417f84b3320a5efa845
- SSDEEP 12288:ISCDe0U+m1V6ECbniSPfS3e2R3feeintFck1TsuC8hH3:IDe0wUTiSWzeei1sP8d3
- TLSH T19EA42394C1B857962448E3F9017F19AE5F302CB6CA3DA78E941FC6E84B64B8CD3E6057
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Application.bat
Resource
win10ltsc2021-20260911-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target Application.bat
- Size 24B
- SHA256 3cae4e4a6deb09aefea50648e5cf6dc1883bca97936b80243aaf8f578344211f
- MD5 c86f840f2e1db9dd38d900ceea588706
- SHA1 a08f88e9a53511bba97b79fcb981ff9b3d1b498c
- SHA512 fbd72508558ed7c7423e686f7e0a2a170c0d540255d0d80c9bafffaef52b047ca4ca85c10163a6c46ca92e4a2ed1610b9ae5c3b01515eb1033bf4b9ad61ae330
- MD5 SHA1 SHA512
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.