General
- Target logo.png
- Size 2KB
- Sample260719-fm2sysb16m
- SHA256 eaff7e7cf0468e8a850deecc147c812d5651d675080312d7235ba051ebe76404
- MD5 1abe0a988d165b387ace4fcdc9c882de
- SHA1 a98681054e51a7f359f0399845fa566349b2c4e2
- SHA512 f0b8df0c7ac5d45085854b46ab35fffedacefa99117a56cfddb029ade322637e1f202b0c1721d269470d7064349266be071af003ade95f6ab0ff9d05bc70e8d9
- TLSH T1A4412862B8FBB5A86431036F8D4879DED0C2DC6DA3530267D61A3A3227035B54ADB122
- MD5 SHA1 SHA512 TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
logo.png
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
logo.png
Resource
win11ltsc2024-20260709-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target logo.png
- Size 2KB
- SHA256 eaff7e7cf0468e8a850deecc147c812d5651d675080312d7235ba051ebe76404
- MD5 1abe0a988d165b387ace4fcdc9c882de
- SHA1 a98681054e51a7f359f0399845fa566349b2c4e2
- SHA512 f0b8df0c7ac5d45085854b46ab35fffedacefa99117a56cfddb029ade322637e1f202b0c1721d269470d7064349266be071af003ade95f6ab0ff9d05bc70e8d9
- TLSH T1A4412862B8FBB5A86431036F8D4879DED0C2DC6DA3530267D61A3A3227035B54ADB122
- MD5 SHA1 SHA512 TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.