General
- Target sample
- Size 7KB
- Sample260708-ta7ekab15l
- SHA256 e090da3b26644f607879cecccbb653efbaf9d52a1f457ac1e13c4448c5597954
- MD5 77a5836f39175bacd0d731ebfa668fc9
- SHA1 5503f2d434c7cbca43acab8e1fe5ee30b2d45808
- SHA512 4600fb1f10cae70780439d1df88f4a70a8c06d4c69c2d103e70025ff31540dd8f7641c6a245b9ca205e607ea3feb509420aa0489c8832622f8f9a26850457f3b
- SSDEEP 96:2sqxDGCk6eHxa4Aco4kVTlm8memPq+tyZQ60291sxCN4cdqwzmPpdGXiiy:2Fbk64xFAcSeBbPqYyZQ6991K1cddz5y
- TLSH T1E9F1A95DA268781C010156931CB77F1FF55AC40BC67C8CEBE69ADD9CC8B83581CCE495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260706-en
21 signatures
150 seconds
Malware Config
Targets
-
- Target sample
- Size 7KB
- SHA256 e090da3b26644f607879cecccbb653efbaf9d52a1f457ac1e13c4448c5597954
- MD5 77a5836f39175bacd0d731ebfa668fc9
- SHA1 5503f2d434c7cbca43acab8e1fe5ee30b2d45808
- SHA512 4600fb1f10cae70780439d1df88f4a70a8c06d4c69c2d103e70025ff31540dd8f7641c6a245b9ca205e607ea3feb509420aa0489c8832622f8f9a26850457f3b
- SSDEEP 96:2sqxDGCk6eHxa4Aco4kVTlm8memPq+tyZQ60291sxCN4cdqwzmPpdGXiiy:2Fbk64xFAcSeBbPqYyZQ6991K1cddz5y
- TLSH T1E9F1A95DA268781C010156931CB77F1FF55AC40BC67C8CEBE69ADD9CC8B83581CCE495
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.