d0e4263c6f4eb664599977a4191642926c54f86ac88991a209af7a1988426046 | Triage™

Login
Reports

Overview

overview

Static

static

1

93055d58-0...2.html

windows11-21h2-x64

Sharing

Copy URL Twitter E-mail

General

Target
93055d58-09af-4ada-8d2e-8e3509b377b2
Size 8KB
Sample260301-st2sragz2h
SHA256 d0e4263c6f4eb664599977a4191642926c54f86ac88991a209af7a1988426046
MD5 ad98830937258a475eb70549523eb157
SHA1 3c2156f806795a23ebbb548d6c540835140d8e30
SHA512 25cbcd0ab37b0835723cd61dde966ab1ea2e7a9a567cb4246f1558eaa7d27a19e9118f8f93719e958abcb1f731d6d3e35d35d7df493dee5e8aad0cff68181736
SSDEEP 96:CMqVAoSlLhq44th3Zq36uWl/Ptxy0tJQFe1lMaoah3vL5LaNclmnrEh2sc:TMilLhWDJrPa0tJeevMaoah3vGO2sc
TLSH
T19702740A15F2807B02E3C69979F1FE1DADC58687C21AEC4432AC81DA0FD7D4B8DCB4A5
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

romcom storm_0978 apt discovery exploit cve_2025_8088

Static task

static1

Behavioral task

behavioral1

Sample

93055d58-09af-4ada-8d2e-8e3509b377b2.html

Resource

win11-20260130-en

windows11-21h2-x64

17 signatures

150 seconds

romcom storm_0978 apt discovery exploit cve_2025_8088

Malware Config

Targets

- Target
  93055d58-09af-4ada-8d2e-8e3509b377b2
- Size 8KB
- SHA256 d0e4263c6f4eb664599977a4191642926c54f86ac88991a209af7a1988426046
- MD5 ad98830937258a475eb70549523eb157
- SHA1 3c2156f806795a23ebbb548d6c540835140d8e30
- SHA512 25cbcd0ab37b0835723cd61dde966ab1ea2e7a9a567cb4246f1558eaa7d27a19e9118f8f93719e958abcb1f731d6d3e35d35d7df493dee5e8aad0cff68181736
- SSDEEP 96:CMqVAoSlLhq44th3Zq36uWl/Ptxy0tJQFe1lMaoah3vL5LaNclmnrEh2sc:TMilLhWDJrPa0tJeevMaoah3vGO2sc
- TLSH
  T19702740A15F2807B02E3C69979F1FE1DADC58687C21AEC4432AC81DA0FD7D4B8DCB4A5
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

romcom storm_0978 apt discovery exploit cve_2025_8088
- Detects RAR archive exploited with CVE-2025-8088 ADS path traversal.
  exploit apt romcom storm_0978 cve_2025_8088
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

Query Registry

System Information Discovery

System Time Discovery

Lateral Movement

Collection

Command and Control

Web Service

Exfiltration

Impact

Tasks

static1

behavioral1

romcomstorm_0978aptdiscoveryexploitcve_2025_8088

© 2018-2026

Terms | Privacy