General
- Target ondFN.exe
- Size 10.4MB
- Sample260705-2hw8kaby7n
- SHA256 0fdbb42d6f2252fc2048c7f146e2aa085288737dee07579a503f93d754b48d5b
- MD5 9ce042883e9185d4d2861329e520bf69
- SHA1 dd46f329a58ebb2d4687ce57afcfab985fc707de
- SHA512 54e964f54add83bade97f4c18ae2ec681925135d007303daa7d1bf90ac556d3c4e42072a4d9e399f3d9e04248b3ab95cd5157a551b896b5ac0ae5146b4419cec
- SSDEEP 98304:taDWofe3khydmiJLaXzFABELc9VLBgG8xsxQjMliZManxXP1:tfacdP2zDLoLXdx9li1XP
- TLSH T17DB67B13EC6515E9C1AD927189A2D613BB717C484B3223E7AF90F2387E76BD06D78384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ondFN.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
ondFN.exe
Resource
win11ltsc2024-20260630-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target ondFN.exe
- Size 10.4MB
- SHA256 0fdbb42d6f2252fc2048c7f146e2aa085288737dee07579a503f93d754b48d5b
- MD5 9ce042883e9185d4d2861329e520bf69
- SHA1 dd46f329a58ebb2d4687ce57afcfab985fc707de
- SHA512 54e964f54add83bade97f4c18ae2ec681925135d007303daa7d1bf90ac556d3c4e42072a4d9e399f3d9e04248b3ab95cd5157a551b896b5ac0ae5146b4419cec
- SSDEEP 98304:taDWofe3khydmiJLaXzFABELc9VLBgG8xsxQjMliZManxXP1:tfacdP2zDLoLXdx9li1XP
- TLSH T17DB67B13EC6515E9C1AD927189A2D613BB717C484B3223E7AF90F2387E76BD06D78384
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.