General
- Target Onyx.exe
- Size 1.1MB
- Sample260623-wr668sey2q
- SHA256 7872f54a1e98d097fa55347b1542fcb9dc21ac8af9ffd42a0b7d4f2a8a51fdda
- MD5 b916a8278cbc83fa6c9b6eaa210bded9
- SHA1 f6cab1b0b077443f11646a52089b2facd3e14777
- SHA512 87e972ce9ce82dccc43155e77d263f1e6d6516c5356cb130ab2ec33293269092c29fad0d95ed726c2083a10bab6049320293fb3dc6dc81e9bc930f1f3ad4c7fb
- SSDEEP 24576:BGwCG37b6Zly1Pp8GYBHwoHCXOguimGsl7diwnAmiv:Pn6ZUtpUHwoHCXOguiKBMwndi
- TLSH T178459E12B2B941EDD06AF0B8BA16AA1FE635344907306DDF13D10D892FB76E05BBB711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Onyx.exe
Resource
win11ltsc2024-20260617-en
15 signatures
900 seconds
Malware Config
Targets
-
- Target Onyx.exe
- Size 1.1MB
- SHA256 7872f54a1e98d097fa55347b1542fcb9dc21ac8af9ffd42a0b7d4f2a8a51fdda
- MD5 b916a8278cbc83fa6c9b6eaa210bded9
- SHA1 f6cab1b0b077443f11646a52089b2facd3e14777
- SHA512 87e972ce9ce82dccc43155e77d263f1e6d6516c5356cb130ab2ec33293269092c29fad0d95ed726c2083a10bab6049320293fb3dc6dc81e9bc930f1f3ad4c7fb
- SSDEEP 24576:BGwCG37b6Zly1Pp8GYBHwoHCXOguimGsl7diwnAmiv:Pn6ZUtpUHwoHCXOguiKBMwndi
- TLSH T178459E12B2B941EDD06AF0B8BA16AA1FE635344907306DDF13D10D892FB76E05BBB711
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.