General
- Target kmlyokyc.rar
- Size 655KB
- Sample260712-h26fssfy5t
- SHA256 d94a1920fb63ac459f855da459f5a82d0f58ce270b3634a3e3c4017abfcfa121
- MD5 f14f170f175a785236647f8dfa786c6e
- SHA1 0256f8b106102300f6c01dc459172cd52ef2224a
- SHA512 c950eee4ad7d71577a612b2108a5e6ebeae974c58110624d765e49624838a97328f094d9e8c3d1690c49d8c4175c9174c6e3431bc570a3a7337ed89ea7fd7ecf
- SSDEEP 12288:8sWilywFh4b8Gnd+BEvmf0LBlVvVvQbE1l/LfUBFdvprurVrW:pWueYGnd+BmmcLBlV9vQo1lDQdv50ZW
- TLSH T1E3E433A0BC316DE21519004247E672AFFFFFB0079A1BAC2C4C991D516AB0A59C7F2F59
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
CrockyHub.exe
Resource
win10v2004-20260513-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
CrockyHub.exe
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target CrockyHub.exe
- Size 1.4MB
- SHA256 94c607f8a729d2aa6c40dfb119fa9977dbb6a22010fee02f0b9db4ff2e2d9013
- MD5 362c34d90fd27f3eb06d2bb04a8a9669
- SHA1 9d77d89c0a244ed076711b98a9fedad8abe0b395
- SHA512 43d992375ceff18b85c8b91eea7af09b28221c605193dbfd007cc0421c23aa4a79f953786c4f15007f38651d237b224cf84eb81768bf036668d25dd993ba8e98
- SSDEEP 24576:14xkSUoomWLHmOtZ9UgKVc9/+dxLMs9I7hSuRfvnv0p0LYdAjMJdzppZahknkf5B:14xkSUoC6dwmdxMEP2/LYdAmzIOnkf5
- TLSH T15B65AE47F2F402E8C16BD178C656AA1FE776344903205BEF67E08E252F63AE15B7A311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.