General
- Target injware.zip
- Size 1011KB
- Sample260715-dandpaas5k
- SHA256 dd7057f004261977a13437df4a194786c7446d485f0ccdfb08f1e6179a123697
- MD5 cb6757d81d2564ad4ca536cd29db8e52
- SHA1 63fd3d04b1ac5ad4f9353fbb84cafe5d8069f431
- SHA512 1ae6564924d3f66e70a4c8b7d967504c595fa3a80db6e71efcd9ea382e802a657b99ba7a0ce3f05ed6186d778bdc94b0efa430728f956311edb4540900988014
- SSDEEP 24576:+4wzv3h62ZMAjivy4MlkpF4OYeYiXx6ANsJP53Fs:wh6kMEW/jJgAgFs
- TLSH T1E625334287F62A17E56DD8DF0D9E31B452D8933A9B5F2F0A73111EB60838712A2CD4BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
injware.zip
Resource
win10ltsc2021-20260513-en
0 signatures
900 seconds
Behavioral task
behavioral2
Sample
Injware.exe
Resource
win10ltsc2021-20260513-en
3 signatures
900 seconds
Behavioral task
behavioral3
Sample
readme.txt
Resource
win10ltsc2021-20260513-en
1 signatures
900 seconds
Malware Config
Targets
-
- Target injware.zip
- Size 1011KB
- SHA256 dd7057f004261977a13437df4a194786c7446d485f0ccdfb08f1e6179a123697
- MD5 cb6757d81d2564ad4ca536cd29db8e52
- SHA1 63fd3d04b1ac5ad4f9353fbb84cafe5d8069f431
- SHA512 1ae6564924d3f66e70a4c8b7d967504c595fa3a80db6e71efcd9ea382e802a657b99ba7a0ce3f05ed6186d778bdc94b0efa430728f956311edb4540900988014
- SSDEEP 24576:+4wzv3h62ZMAjivy4MlkpF4OYeYiXx6ANsJP53Fs:wh6kMEW/jJgAgFs
- TLSH T1E625334287F62A17E56DD8DF0D9E31B452D8933A9B5F2F0A73111EB60838712A2CD4BC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score1/10 -
- Target Injware.exe
- Size 3.3MB
- SHA256 1ac841b387c29e4962f7afab928a7ce97432f3aabf8586f16c34904b0e20a00f
- MD5 f8899401aa119ba048164950641730ca
- SHA1 2fa008b80102879c050418781c16348b19535064
- SHA512 31f896f9039b21f6459bd68946985c6db1b3a694f691d625fef385e5ecd46059d810ea4bf6404ff8a129a604bdd49d1314fe2d1ada7fe57cd78dd0c6a5268c67
- SSDEEP 49152:ebbb4xg6h7tgQRzO36ugSj51nueKPii8zpV+U6Bmr:e6Xwr
- TLSH T154F5D617DAB210E0D4B4D13EA602702FF9B234E54335A7E397D25B1B1BA17E4A97EB40
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
- Target readme.txt
- Size 70B
- SHA256 9aff080e4b6749901b30c2e896179448f5691c621729cf14c4500a60ee2f5057
- MD5 b34b2b6d00402de3edfe9cb6289fc5ee
- SHA1 97caf863dec92699b2cdc81ded9ba84818b089df
- SHA512 bc854d642f4356653073fc01e6938e6464f3e2567bb00281bba13a8d3856456a5fa94fa29706f7ca03c8bb345f62e221eb9a8153ce71814a9ce6c452740e75aa
- TLSH T134A022A332A320E00AC0000C300C00008F0B82CE3230F0823C00808C330B023EC2B020
- MD5 SHA1 SHA512 TLSH
Score1/10