General
- Target IMG_7516.jpg
- Size 3.2MB
- Sample260705-3ntkasgt2w
- SHA256 1ba5168bac0b9b8a1d743912f1da27863e383b29d5417efa1f8511bcb1dbe2c3
- MD5 efa0fc316c8cf92be1edbee9ac40a094
- SHA1 4346156ab7345191d903f3b189dad7c789c6b35e
- SHA512 d61ea0914db94db508bd032818a2316a389a9fd2df5d88047fbaaf4b83d13167610ad83128691b5fd2f50789c3c6fa71189499012d952302ca063bfcd2fd0d14
- SSDEEP 98304:JIb6XjKvI3+4WhT2A5pmSkWGVPes2KRAll:Jw6XjKAOcAnmBPe4RAT
- TLSH T109E533C73206526BEB484DF1C4DB693A35B6B835191843C9C70C416FACE14BBB2E9DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
IMG_7516.jpg
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Behavioral task
behavioral2
Sample
IMG_7516.jpg
Resource
win11ltsc2024-20260629-en
3 signatures
150 seconds
Malware Config
Extracted
Family
-
onyxc2
C2
-
computezlweb.wiki
Attributes
-
port
443
-
url_path
/7e243e2b5c5ds7he/backend/api/app.php
Targets
-
- Target IMG_7516.jpg
- Size 3.2MB
- SHA256 1ba5168bac0b9b8a1d743912f1da27863e383b29d5417efa1f8511bcb1dbe2c3
- MD5 efa0fc316c8cf92be1edbee9ac40a094
- SHA1 4346156ab7345191d903f3b189dad7c789c6b35e
- SHA512 d61ea0914db94db508bd032818a2316a389a9fd2df5d88047fbaaf4b83d13167610ad83128691b5fd2f50789c3c6fa71189499012d952302ca063bfcd2fd0d14
- SSDEEP 98304:JIb6XjKvI3+4WhT2A5pmSkWGVPes2KRAll:Jw6XjKAOcAnmBPe4RAT
- TLSH T109E533C73206526BEB484DF1C4DB693A35B6B835191843C9C70C416FACE14BBB2E9DAD
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.