General
- Target 2989_.zip
- Size 190KB
- Sample260722-mng89starh
- SHA256 28d6d54fb15ed680e48bb21fe67270b653f6b0608b7da0c8c692afac8b696049
- MD5 b0fb18639327b9073e733fd538c5fab8
- SHA1 67d9701131ed22c092b4eb058e7d786da7ba005a
- SHA512 45f8d924a35199b5fd5ceb58ad24590ba4d17c8f8a32f05377d3bc92f5ddaa1c6bb34d5dd440eff52c799d9c1cf503e24ca9ea97afc1343bc97d1281afa3d3c3
- SSDEEP 3072:qs7xBcN0ynOL6G1gisq+2wVuOONN83ePE894bSdlG+r8PoeSQuJIJ6l4evOZxYb+:qsFmEsqsVbOHR83wGHPoeS8J6eevOZ4c
- TLSH T17314220C05AE9924D83E9C927452B3FC5E27579D27CAC18A0CD2DEBBF16A1392CF450E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
2989_.zip
Resource
win10v2004-20260513-en
18 signatures
150 seconds
Behavioral task
behavioral2
Sample
2989_.zip
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target 2989_.zip
- Size 190KB
- SHA256 28d6d54fb15ed680e48bb21fe67270b653f6b0608b7da0c8c692afac8b696049
- MD5 b0fb18639327b9073e733fd538c5fab8
- SHA1 67d9701131ed22c092b4eb058e7d786da7ba005a
- SHA512 45f8d924a35199b5fd5ceb58ad24590ba4d17c8f8a32f05377d3bc92f5ddaa1c6bb34d5dd440eff52c799d9c1cf503e24ca9ea97afc1343bc97d1281afa3d3c3
- SSDEEP 3072:qs7xBcN0ynOL6G1gisq+2wVuOONN83ePE894bSdlG+r8PoeSQuJIJ6l4evOZxYb+:qsFmEsqsVbOHR83wGHPoeS8J6eevOZ4c
- TLSH T17314220C05AE9924D83E9C927452B3FC5E27579D27CAC18A0CD2DEBBF16A1392CF450E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Boot or Logon Autostart Execution: Active Setup
Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.