General
- Target Screenshot 2026-07-01 130848.png
- Size 4KB
- Sample260706-wc2cfaev4p
- SHA256 47a104df0b62989777d183326fe3fdc29222b1a79b457193b78fa6c86252bdf8
- MD5 7accc5763d87056e36d727c450de1326
- SHA1 3cfc1191d9b8549ec325f266ea7de0bb2f8f86b2
- SHA512 4e680b504613d5a76292defb27086d6b03f843a5bf31e5a0cfb4e2b311c405d1df737dce8f231c8b877497c3fd01f20a188a3e1cc14ac5e49dc7f6be66e45655
- SSDEEP 96:p6AF79nCEhXbqdI1SIKnImqGoAM8fNfb4OPQWwlcXRi37d4hb6K0r:p6AF4ExbAMS1n4CzpnIWliZ45Or
- TLSH T189917D647E51054C7450B1C15EE33324B3A3287931269A99F642DD5F0D0A1671BBF923
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
Screenshot 2026-07-01 130848.png
Resource
win10v2004-20260513-en
14 signatures
300 seconds
Behavioral task
behavioral2
Sample
Screenshot 2026-07-01 130848.png
Resource
win11ltsc2024-20260706-en
3 signatures
300 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://gamble-rig.up.railway.app/
Targets
-
- Target Screenshot 2026-07-01 130848.png
- Size 4KB
- SHA256 47a104df0b62989777d183326fe3fdc29222b1a79b457193b78fa6c86252bdf8
- MD5 7accc5763d87056e36d727c450de1326
- SHA1 3cfc1191d9b8549ec325f266ea7de0bb2f8f86b2
- SHA512 4e680b504613d5a76292defb27086d6b03f843a5bf31e5a0cfb4e2b311c405d1df737dce8f231c8b877497c3fd01f20a188a3e1cc14ac5e49dc7f6be66e45655
- SSDEEP 96:p6AF79nCEhXbqdI1SIKnImqGoAM8fNfb4OPQWwlcXRi37d4hb6K0r:p6AF4ExbAMS1n4CzpnIWliZ45Or
- TLSH T189917D647E51054C7450B1C15EE33324B3A3287931269A99F642DD5F0D0A1671BBF923
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.