General
- Target ip_webhook.bat
- Size 493B
- Sample260605-sebb9abv5m
- SHA256 eff73567eb5d5bf1c7b11c34d402755233f60f2f7c2a6829114e168ca8f99f1c
- MD5 b920283dce3bc8d21567268d375d267c
- SHA1 4502b6dc0906d312ed408c7f22276d2e2d11c71d
- SHA512 831ec4fb9759c097361f937d6d7c1477f24dbb317162f8ae32a16f985f7dbdaa9a480dd26a81a766d8a7a46b73e18a165058d32efa8420a928fd6a9e4c25b121
- TLSH T167F0C9B328C1A81106A14EAAF803250E6B8340E8855F800F7089A0B84E9C22C94B39E9
- MD5 SHA1 SHA512 TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
ip_webhook.bat
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
ip_webhook.bat
Resource
win11-20260513-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target ip_webhook.bat
- Size 493B
- SHA256 eff73567eb5d5bf1c7b11c34d402755233f60f2f7c2a6829114e168ca8f99f1c
- MD5 b920283dce3bc8d21567268d375d267c
- SHA1 4502b6dc0906d312ed408c7f22276d2e2d11c71d
- SHA512 831ec4fb9759c097361f937d6d7c1477f24dbb317162f8ae32a16f985f7dbdaa9a480dd26a81a766d8a7a46b73e18a165058d32efa8420a928fd6a9e4c25b121
- TLSH T167F0C9B328C1A81106A14EAAF803250E6B8340E8855F800F7089A0B84E9C22C94B39E9
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.