General
- Target releases
- Size 215KB
- Sample260719-rn5f1sft2y
- SHA256 cf739fde599e5cd60c899eae5cd0d552c70ab1dfa21cdb30ffcbc1c95f31c6bc
- MD5 961660a82464b9e5e43a76c00679a717
- SHA1 0b16b8ad44963dbf948506e26a7339834c5e6b41
- SHA512 165c88cd1b9623c6c34befe0e92938cfa41700f2dc43820368e7bf5f637a9a7df08fdfc0e6a4032d09055560752c86826215692f2c27d6f23f03dd1ff7fcfb8a
- SSDEEP 6144:8TUPqLxfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09medzeJ5PTQYbeHxHA7op9hrp:UUPqLxfprwz/VZIdxqdnLhjUsnVm7Mej
- TLSH T17024B470A178617D016F268AF670DB14D3ABE31BEB8952E5B53F82F457D3C84EA43098
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
releases.html
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
releases.html
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target releases
- Size 215KB
- SHA256 cf739fde599e5cd60c899eae5cd0d552c70ab1dfa21cdb30ffcbc1c95f31c6bc
- MD5 961660a82464b9e5e43a76c00679a717
- SHA1 0b16b8ad44963dbf948506e26a7339834c5e6b41
- SHA512 165c88cd1b9623c6c34befe0e92938cfa41700f2dc43820368e7bf5f637a9a7df08fdfc0e6a4032d09055560752c86826215692f2c27d6f23f03dd1ff7fcfb8a
- SSDEEP 6144:8TUPqLxfprwz/VZIdxqdnLhjUsnVm7MeqWQ8Wz09medzeJ5PTQYbeHxHA7op9hrp:UUPqLxfprwz/VZIdxqdnLhjUsnVm7Mej
- TLSH T17024B470A178617D016F268AF670DB14D3ABE31BEB8952E5B53F82F457D3C84EA43098
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Writes to the Master Boot Record (MBR)
Bootkits write to the MBR to gain persistence at a level below the operating system.