General
- Target sNJjww29.exe
- Size 1.7MB
- Sample260709-zssl1saw2v
- SHA256 a45ac4d7c68d1d138253fbdd715108ef785ed83eb2dcf8a730469d31f703d65a
- MD5 815c47c1582462877547dbec27498f8d
- SHA1 f0f3a40914eaef4e35deac98d76f32c208529af2
- SHA512 1c0a1f52de334278967bd5c483298735559c6ddb6f19f4757c309d157de7b294ccacf7d09e3b8605de3cec6d9c68e1c33dd9a2fc37d4e65d69ad0fda69c12375
- SSDEEP 24576:wUFz8dhuXT8eZIsMJfxUt+XXfHZ5iE0MQtyfLwkioxUbxc:NYd6hZIsKfxP2E0MQtMLUox6xc
- TLSH T1E885BE83B3A594ECC13AD53DCA12D61BE7F5B41023206ACB27D41A5AEF13AE44FB9315
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
sNJjww29.exe
Resource
win10v2004-20260513-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
sNJjww29.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target sNJjww29.exe
- Size 1.7MB
- SHA256 a45ac4d7c68d1d138253fbdd715108ef785ed83eb2dcf8a730469d31f703d65a
- MD5 815c47c1582462877547dbec27498f8d
- SHA1 f0f3a40914eaef4e35deac98d76f32c208529af2
- SHA512 1c0a1f52de334278967bd5c483298735559c6ddb6f19f4757c309d157de7b294ccacf7d09e3b8605de3cec6d9c68e1c33dd9a2fc37d4e65d69ad0fda69c12375
- SSDEEP 24576:wUFz8dhuXT8eZIsMJfxUt+XXfHZ5iE0MQtyfLwkioxUbxc:NYd6hZIsKfxP2E0MQtMLUox6xc
- TLSH T1E885BE83B3A594ECC13AD53DCA12D61BE7F5B41023206ACB27D41A5AEF13AE44FB9315
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Downloads MZ/PE file
-
A potential corporate email address has been identified in the URL: [email protected]
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.