General
- Target wockyupdate2-1.21.11.jar
- Size 13.0MB
- Sample260709-wwac3ags9v
- SHA256 3539dbf3d81846f8d7276dd66c63c210d6f50d622d1fad39ee371d1dab5760e2
- MD5 359c70e0164079efe7f10ca0faafa725
- SHA1 22e7cf24e898f8c6afceea396ebd5b4b3e3ac490
- SHA512 886340caaad3c1a27eec86b5d74e53d8a23b6b9f858c3fd7bd4c0092b04bd2527eef3b022f2bef1638e69ed26a99fef4ad382da43f5ca3aef413bd42b128eb12
- SSDEEP 393216:RvaDe2kSKV6sIWl8SPam58zrdecXmewRu7t+:FaBkS4IWlBP2vxmiU
- TLSH T1DBD63303FF29BEBED13FB23751808FD2FA2C05D1C016612E3761588E99C66AB4715A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Targets
-
- Target wockyupdate2-1.21.11.jar
- Size 13.0MB
- SHA256 3539dbf3d81846f8d7276dd66c63c210d6f50d622d1fad39ee371d1dab5760e2
- MD5 359c70e0164079efe7f10ca0faafa725
- SHA1 22e7cf24e898f8c6afceea396ebd5b4b3e3ac490
- SHA512 886340caaad3c1a27eec86b5d74e53d8a23b6b9f858c3fd7bd4c0092b04bd2527eef3b022f2bef1638e69ed26a99fef4ad382da43f5ca3aef413bd42b128eb12
- SSDEEP 393216:RvaDe2kSKV6sIWl8SPam58zrdecXmewRu7t+:FaBkS4IWlBP2vxmiU
- TLSH T1DBD63303FF29BEBED13FB23751808FD2FA2C05D1C016612E3761588E99C66AB4715A5B
- MD5 SHA1 SHA512 SSDEEP TLSH
-
A potential corporate email address has been identified in the URL: [email protected]
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.