b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575
Classification: Malicious
b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575 is a malicious file sample. Linked to Fatduke malware.
Detection summary
- 0 antivirus detections
- 1 IDS alerts
- 3 processes observed
- 1 contacted hosts
- 1 DNS requests
MITRE ATT&CK associations
Malware families: FATDUKE (S0512)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2025-08-04 12:45:06 | 2025-08-04 13:30:17 | ||
| FatDuke | ThreatFox Abuse.ch | 2024-04-25 15:23:59 | 2024-04-27 15:20:52 | S0512 FatDuke | |
| Worm.Fadok | MalwareBazaar Abuse.ch | 2024-04-24 15:02:33 | 2024-04-24 15:02:33 | malicious-activity |
Tags
win.fatduke downloaderSample information
- Filenames
- b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575, 200062350.tmp
- File type
- application/x-dosexec
- Size
- 1653248 bytes
- MD5
301a50dbf2903823a87860c5fcd8941d- SHA-1
180936e169c0b303d89aef3ee3e01083b8b4219f- SHA-256
b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575- First indexed
- 2024-04-24 16:24:30
- Last updated
- 2025-08-04 13:30:17
Network contacts
DNS requests
Process list
| Name | Command line |
|---|---|
| b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575.exe | |
| WINWORD.EXE | /n "C:\b570f694c37aa5184d86a9a6c903bedec10d53f5ae5979ca047a25b43ce62575.docx" |
| mls.exe | -s |