General
- Target pullzobsidian.rar
- Size 72.0MB
- Sample260721-13wbbsssa1
- SHA256 0de28c744b968e156c857a1d473fd52e76eb8129d1dd60897cf02f61cfbef6d9
- MD5 18a711d8c308c478e514e61556a1a039
- SHA1 57da954d9ebb1a22ff21d4e90a8279075254b597
- SHA512 820a83d48b1826d9eeef8044eb9bacd89952d9c1882d9ee0c30e3fb9a0ad9189448031c00ae859dc4d2c4e894c228aa2af0b738a807c386a545e6aa9dbd2098b
- SSDEEP 1572864:AZrSt6qoAlUjCPK9DyF0dd/dyfAXc1NUKH/dSFwhARyEGSf5:ErW9tlTy9uF0dDsAXc1DYXw25
- TLSH T19AF73363838A0DA01D1F5E304FB4742D9D21E70B9DFE916468B7CDE3F8A5617C988A1E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
pullzobsidian.exe
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
pullzobsidian.exe
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target pullzobsidian.exe
- Size 72.5MB
- SHA256 345b70cc7bdbea29f0f90b06df35ae2a85c37f95a53fa0a5532f7f3e4d8ed658
- MD5 379000b645a1d2e1aea8bae55b335801
- SHA1 264d477a7ce8303a1bd597b13801404731be1f81
- SHA512 7b035f518868c5badd49c7679ae13844fdac5e39a648eb58229337c0b99293051098bfa7541591aab7bb8aca51770bbaddf8ed0f277937feff5fa9923c17d944
- SSDEEP 1572864:74f/Y7YEUZl7XNyjhQR5QMJJ8R/E0/utd0xyxPhkOThxH1gmhw+:kflEQlLgaR55oR/E0/kd0xq1FxHg+
- TLSH T193F733C17E492AB6D9B50630B4847D2796E630895FA3C19B1FF065361F27780AFB0BE1
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.