General
- Target index.html
- Size 6.0MB
- Sample260705-gk8n6ady2m
- SHA256 5bc46d0db54a09b364ba4c29c38695e23596b793f41a0b4cf5f2ca4818f0cb33
- MD5 1ff81e56694d50f5a413f5059456fe27
- SHA1 dbe02c6ed8729b71ea89cfbc586eda089d24d7c6
- SHA512 0e6f5c90c376c9d9f2daa5f5a5ba50559df85d5d91b7a11093e04baaae19eb26285d7f170d9aac7c91abbaca174bbdfcfcbb1638d0617f725dcc3075577751ac
- SSDEEP 49152:w29yU2vr4otXdR/55ZpeMwkp2u8vm+4Q4CLWhQp1:R
- TLSH T16F56AEAE57D2FFDD4C142F2468CF49936CE9F080509ED78AE899F0A5CE58602617E2F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
index.html
Resource
win10v2004-20260513-en
13 signatures
900 seconds
Behavioral task
behavioral2
Sample
index.html
Resource
win11ltsc2024-20260629-en
13 signatures
900 seconds
Malware Config
Targets
-
- Target index.html
- Size 6.0MB
- SHA256 5bc46d0db54a09b364ba4c29c38695e23596b793f41a0b4cf5f2ca4818f0cb33
- MD5 1ff81e56694d50f5a413f5059456fe27
- SHA1 dbe02c6ed8729b71ea89cfbc586eda089d24d7c6
- SHA512 0e6f5c90c376c9d9f2daa5f5a5ba50559df85d5d91b7a11093e04baaae19eb26285d7f170d9aac7c91abbaca174bbdfcfcbb1638d0617f725dcc3075577751ac
- SSDEEP 49152:w29yU2vr4otXdR/55ZpeMwkp2u8vm+4Q4CLWhQp1:R
- TLSH T16F56AEAE57D2FFDD4C142F2468CF49936CE9F080509ED78AE899F0A5CE58602617E2F4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.