General
- Target brighttpath.com.zip
- Size 4KB
- Sample260722-g67c8abf92
- SHA256 b8e3cf0f877f183c3b073a9887c080eb2148c953cbdeaab92b4d8f38560bd2c8
- MD5 1c8e0d03c9c78b3d0367a40a0fe22e97
- SHA1 42953e3d3cedbbc9f8b04855299dd97170104380
- SHA512 1a6a8a4fae83c8cf48c7f66261a3ae3c8f847505505a7e31f024d5d0de2780758899069163be560b5206552d43a76a2b0b79e898c616c655cac2e21272410434
- SSDEEP 96:e4e9S1fJ3odU4PFcVDYaWTjwwssxVqrb0yHcwvMKSVo7JMcM5YsUS:egodU4P2BYaWhxBwU07JT6KS
- TLSH T1A4A16C1823276312DF22BA3470A77A0EF4B112390CC58806B442B75D1DE2B2C27A89B6
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
slmesp-ps-vsl9-yt/index.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
slmesp-ps-vsl9-yt/index.html
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Behavioral task
behavioral3
Sample
slmesp-vsl9-yt/index.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral4
Sample
slmesp-vsl9-yt/index.html
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target slmesp-ps-vsl9-yt/index.html
- Size 4KB
- SHA256 b027001b20130d3e90aa79073ebfdecd8512cec3e6be8f1c9680312184f00670
- MD5 e4464e62f5281383786eff8bf021beca
- SHA1 d3ec0ceefdd22211343f2345a33e96ae56d2dae0
- SHA512 830645881c97e03b62fc6083e28f9529b459a9b43e4b9cadb437de95c55f209ccfded2fdc104030d96e03fb657dd0bef7e4f6d18640c0724a7aae331028b2c06
- SSDEEP 96:0vY85MnQVv63RjOU2ephOF8aob/F6WK9WUZJeP2psTKVaG40Zh/5U8jL6RUhqCU:0vY8ycv6hjO9eTOF8aob/FpjUZJ22psh
- TLSH T1CBA1D8576C930113740395693BB7BB4726B4E027E105C8787FED9295CF8BA9CC4A7B88
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.
-
- Target slmesp-vsl9-yt/index.html
- Size 6KB
- SHA256 f8ee4e3f0102c732f4ad28ea0e2c0ff86544cc6699b29228abd29f42d033b59c
- MD5 036532147e4505a65114117878b14376
- SHA1 6e208ab39209a75ff9b3e32c3f7bb91a5c92b90b
- SHA512 14374a2bd3d72f815839566cfb4792ae1c3c390cc340d90ecaaf02c055ffcaf181c7d08d12f27f73b1e03fce9ba24a5941599b852b107ecf2c26594bec97092a
- SSDEEP 96:XHKxWZzGanF2CZIAowZhrWOpTLVOt8L6RUhqCuL6RUhqCuL6RUhqCuL6RUhqC5:3KxofI56ZhLmq0zCS0zCS0zCS0zC5
- TLSH T120D164718880585C9173C255ABB2FB1AEF2BA167574A6050379E6B734FB132FC42325F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.