General
- Target PhotonConnect-V1.zip
- Size 460KB
- Sample260620-3rg1nsbt2s
- SHA256 7251ba126b4a8dde03ee466a27966b7d07a2dacbfc654a6e6c1585463c6596da
- MD5 b0ccf90458e39e22ef4d666960bc1c97
- SHA1 54117542b115f38ee35d165f1ea606404bba3c97
- SHA512 9f46fe3c5d37b079bf9fde26864c344153f18151385570764f43637b0ff58362307a50b067c52c455cf0681378e079868fd7aa05cec1d67227338cddea9aca67
- SSDEEP 12288:Keyz0xcVh8+q9IA77aGjrWUlqeyz0xFVM8+q9IA778/jrWUlK:0HVq9Z77aGjJSVq9Z778/jW
- TLSH T1C8A42374BA9521E1FF0700704EA2FB92E4C9676144E26E5A1459E2E0357ECFEEC12ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
PhotonConnect-V1.zip
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
PhotonConnect-V1.zip
Resource
win11ltsc2024-20260617-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target PhotonConnect-V1.zip
- Size 460KB
- SHA256 7251ba126b4a8dde03ee466a27966b7d07a2dacbfc654a6e6c1585463c6596da
- MD5 b0ccf90458e39e22ef4d666960bc1c97
- SHA1 54117542b115f38ee35d165f1ea606404bba3c97
- SHA512 9f46fe3c5d37b079bf9fde26864c344153f18151385570764f43637b0ff58362307a50b067c52c455cf0681378e079868fd7aa05cec1d67227338cddea9aca67
- SSDEEP 12288:Keyz0xcVh8+q9IA77aGjrWUlqeyz0xFVM8+q9IA778/jrWUlK:0HVq9Z77aGjJSVq9Z778/jW
- TLSH T1C8A42374BA9521E1FF0700704EA2FB92E4C9676144E26E5A1459E2E0357ECFEEC12ECD
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.