General
- Target ef7231c777d5cfba5d8e258af6666b1f7d7c9c65
- Size 14KB
- Sample260720-qgmrysbt3n
- SHA256 904a4f1a37be939df92f012e286d533f722201e97790c68be0f937821b65bccb
- MD5 5d89fd5e8239b9abea3e2a5ada655573
- SHA1 ef7231c777d5cfba5d8e258af6666b1f7d7c9c65
- SHA512 c0eda9f4c6d99d64e69d591b6e8201a59eed8b3a42ca6dfdef513d77658e7c323663bb1dd9cc9d993fff85c56a1426d48c77f76cb50147e00b87aacfdaac56e4
- SSDEEP 384:lDp5HumQZe/s8RbXvigwi/ZL6lgJiwLyTMDmOR:lQ80Efi3oZh51xR
- TLSH T15762AF20C9B56B72C503A3BDA225071FFD2AA962D61BB9526C4E37D18902C7C8F51E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
ef7231c777d5cfba5d8e258af6666b1f7d7c9c65.docx
Resource
win10v2004-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral2
Sample
ef7231c777d5cfba5d8e258af6666b1f7d7c9c65.docx
Resource
win10ltsc2021-20260513-en
4 signatures
900 seconds
Behavioral task
behavioral3
Sample
ef7231c777d5cfba5d8e258af6666b1f7d7c9c65.docx
Resource
win11-20260513-en
5 signatures
900 seconds
Behavioral task
behavioral4
Sample
ef7231c777d5cfba5d8e258af6666b1f7d7c9c65.docx
Resource
win11ltsc2024-20260709-en
16 signatures
900 seconds
Malware Config
Targets
-
- Target ef7231c777d5cfba5d8e258af6666b1f7d7c9c65
- Size 14KB
- SHA256 904a4f1a37be939df92f012e286d533f722201e97790c68be0f937821b65bccb
- MD5 5d89fd5e8239b9abea3e2a5ada655573
- SHA1 ef7231c777d5cfba5d8e258af6666b1f7d7c9c65
- SHA512 c0eda9f4c6d99d64e69d591b6e8201a59eed8b3a42ca6dfdef513d77658e7c323663bb1dd9cc9d993fff85c56a1426d48c77f76cb50147e00b87aacfdaac56e4
- SSDEEP 384:lDp5HumQZe/s8RbXvigwi/ZL6lgJiwLyTMDmOR:lQ80Efi3oZh51xR
- TLSH T15762AF20C9B56B72C503A3BDA225071FFD2AA962D61BB9526C4E37D18902C7C8F51E1D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.