General
- Target view
- Size 116KB
- Sample260620-3cmmlsas9q
- SHA256 dcc41a64de0b46a63621af7970448f0139c340f3899e87291592e2a094f688f0
- MD5 999af56284e12244472ca0eb59f96293
- SHA1 1fe6c10b27f43a6e99b9023f1a3efbe29ddda6ba
- SHA512 05f8c04e95e98673d39fc974cb462e03b5157e73bd99aa864c54f40f3ab339935c49ed3074aec6c745bed15b4814dec8974c5d5d46e678c7e6327fb4d8760db6
- SSDEEP 768:l6vT4aLiQhNTEjLg62ARfvZrempH2JRyCQ819yI2SRp5PKv3k22ERTjVNkm5yf6Z:2EVVOzt+Ms8dOTnS9OYRIARdRIAR9e/
- TLSH T1E3C3856202119CF9EEF74463208A1D563E5C1173B3925077F3DD5EAA5B978EB02283BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
view.html
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
view.html
Resource
win11ltsc2024-20260617-en
13 signatures
150 seconds
Malware Config
Targets
-
- Target view
- Size 116KB
- SHA256 dcc41a64de0b46a63621af7970448f0139c340f3899e87291592e2a094f688f0
- MD5 999af56284e12244472ca0eb59f96293
- SHA1 1fe6c10b27f43a6e99b9023f1a3efbe29ddda6ba
- SHA512 05f8c04e95e98673d39fc974cb462e03b5157e73bd99aa864c54f40f3ab339935c49ed3074aec6c745bed15b4814dec8974c5d5d46e678c7e6327fb4d8760db6
- SSDEEP 768:l6vT4aLiQhNTEjLg62ARfvZrempH2JRyCQ819yI2SRp5PKv3k22ERTjVNkm5yf6Z:2EVVOzt+Ms8dOTnS9OYRIARdRIAR9e/
- TLSH T1E3C3856202119CF9EEF74463208A1D563E5C1173B3925077F3DD5EAA5B978EB02283BE
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.