General
- Target kimshealth-expressions.zip
- Size 2.5MB
- Sample260529-pff3cab15n
- SHA256 c52d8c07f1d9c2a3ad68243b71495ba8d9c89dd6ff31859edca66ec8bba710c1
- MD5 ed62583971caef8f8b697ed776117db7
- SHA1 232fa14e38ac99d08d9b72a84338f207816829f9
- SHA512 d9ff3582f013b25405a87bca339c8ebff96d7fdd53d2aea22db731403f952fcba44a17b3a83342817383de4a0481aaa0b9c3450993c6bdabac51f3a916e58dea
- SSDEEP 49152:p3zIEMiiNmsRN4P0OJp7cDmVkuNa6qJbbN7Aj16F/nUy2wfGkl3ok5nETRV959ip:BbggPZJ5w6qdb/BU2G0owCP5ov
- TLSH T13FC53378D6500039F338E5325D8B8A82DB7B5B875D9B282423241BF9791F5F8A937339
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
kimshealth-expressions/header.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
kimshealth-expressions/header.html
Resource
win11-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
kimshealth-expressions/index.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
kimshealth-expressions/index.html
Resource
win11-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral5
Sample
kimshealth-expressions/js/nav.js
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral6
Sample
kimshealth-expressions/js/nav.js
Resource
win11-20260513-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target kimshealth-expressions/header.php
- Size 2KB
- SHA256 91b4b52a01d180e7816ef2dde17a587e171fc7a83417e3067b07a8a677637825
- MD5 b350b73ad6cc49e18975dab9187f16bc
- SHA1 59ca9d7dbc90d7be4e405db7b57287471faf0133
- SHA512 d5b740e0f503abdd353870ed38e09c83ca63002aa80d8d353b4c3862892af1526ebc7f277347ede5e223729fca6e79a2469211aae1429a8daabf6d0ce522e97e
- TLSH T19C51341614F4012B21404254BC623A7F9DA74107CB4D1560B1BE0F6E6FD6E8AD5EB909
- MD5 SHA1 SHA512 TLSH
Score4/10 -
- Target kimshealth-expressions/index.html.te
- Size 26KB
- SHA256 2959af16be92801fcc30dfad3ba7f1cba9da308f9ec56abaed78d72d40972a69
- MD5 87b07643f48e8282a3c92ea87595a004
- SHA1 4a6e8ecd24a1c375973b346b2147a10de59d44fa
- SHA512 3d1b5425f056ca16b844fc29a8756b31bd9b911f346581068e1a1a1244793544e21f9947a99fbfd8130a045c323e235da7861f30fe07170d91b92e3ed4b25987
- SSDEEP 384:KdxK/m587nK5EEKrwt4ivHOMxsHOMxsHOMxKr9xEKrwtObvqOMxsBOMxsDOMxKrp:KdxK/mEcEEWbOIaj1g8YGMfBC2
- TLSH T10CC2EC25528D0EBF165312B774A537EEE09F8E31EA3380E2F5F7865986C3E49C812527
- MD5 SHA1 SHA512 SSDEEP TLSH
Score4/10 -
- Target kimshealth-expressions/js/nav.js
- Size 11KB
- SHA256 56e96a30183299b08d4593b6de581f87f377f892cd787bd5e7d9ac2d2999b9c6
- MD5 0da4bf03d7304775e7fe860873ff0e27
- SHA1 cf4a78f31430538cc967115c5c60c6c0d644b77f
- SHA512 93b31ceffeefe1def2bd655ca4b42704d60f79c831b39e7b48fff6c527667cbaedd7739c9897c403182f7e0c3dd7f78bd28ad08161053f83d8c31028403e1742
- SSDEEP 192:zShhAvF2+gIw+1smyduR7ixgwqKdN3KzpigiIut/qo+EEoTCWwcHSrt9I88w:oSFz1juEoCAyrLp
- TLSH T14D4252D6F3AC34A140BB265A82BF54A1136E2255C6078812FCFC565F2DC3B45BBE0B8D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10