General
- Target The turning point.rar
- Size 1.4MB
- Sample260619-28clvads4w
- SHA256 7573c96ea6e485f0ec3e0e7c8c5f17e0a503f64ef05339a4a682a3cb5d52f8cc
- MD5 5df95ca15ba384790a8f59409b7b0270
- SHA1 84083b1d3a58ce8652d31fd925c358d6e6fa7f98
- SHA512 d34b8ac8b82ee47a7e5266dfb0fc29c6624c47144f78b89565e4c6fc1e57d655789ac24a61b835b8642f2ba5fde8f315fe5b02230645e968d40cca718a89ace0
- SSDEEP 24576:F0sdmgaB3tOKqsE7fOdtJqU/rXHNc432USSk5mS/rxj57KNlBkIj86o8ZkawjR94:PvaB8OgsP/9S7kYrxwNlKI/o8ZfSHwzJ
- TLSH T1566533B3D5C8976F6C4982DD15088AC9BEB0B919C4C1F765F327B41AB378CDA30E2619
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Combat Master Internal 1.2.dll
Resource
win11-20260513-en
1 signatures
900 seconds
Behavioral task
behavioral2
Sample
FateInjector.exe
Resource
win11-20260513-en
14 signatures
900 seconds
Malware Config
Targets
-
- Target Combat Master Internal 1.2.dll
- Size 589KB
- SHA256 433dc6c5227aa9bcfb21e118ceca7232d116dcba7698fd9615e0579f7750c98e
- MD5 4a76db4217572770effb71a0920215bd
- SHA1 ca0bb43c751b7d21953dc6caa07ae664ef8250d1
- SHA512 347c3c6c60bdb7d6e19ffdc212837129dc876d0f004764f6f4e5964ee616ba2de2250af8a7c5c4e2474c216912f37304d75ea5d23f20dc270acc9be1166c178a
- SSDEEP 12288:+0XgZw1PNgm659A/DbzgQQB5396+Zn9JN6/Y:4qca7bEQQB5396+Zn9C
- TLSH T11CD47B47E2E842E8D02BA139A147B61FF53A3858273017D763E51D592FE27E06BBB704
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target FateInjector.exe
- Size 3.7MB
- SHA256 77a84c4ed29551d8968a9bc5de796d6f8463fa54df8554b3cff91ca83d8ff70d
- MD5 9e6de7c7ebd1a00c2f7ddec78ba9403a
- SHA1 65a9e65bf9b2b683ed93ac9848df8b5c9f3d4297
- SHA512 f2dac6efaf4fa6c32b14a45bfa60813b67eb3a46e9a7342d13c1ba3bea3e0a188a5703d34c5fc65d20baae751c334474a9b51d7862d4c74fb60007dd8ce4adc9
- SSDEEP 49152:PVE0okol7ESpUbVIwI2SovAJsXbkiokMTU+tbCn8GTs5QnSaTevSpoadQ4zXgpdP:dEcI71ibyJJkwC9JfdQ4zitt
- TLSH T178066C5A66F902ECD5BAC17C8D6B8902E3B338574B7253DF0990555E4F27BE48E3A320
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.