General
- Target sample
- Size 2KB
- Sample260722-phl2davbke
- SHA256 91503910a440feab0e2b50b92d4c6e9255e5128ae497e39c274adea581a98449
- MD5 de433f8323dbe31bc71391c4e6ae8897
- SHA1 141e2a6ab0212bcd5b0c71168e8aeacc4c97517f
- SHA512 8fb6fa8c0f72b57abbd44b8144a91b9ddbbbf2a564a09ca479e886330cd8af730dd0ed8c74a023ffa1c7fa719aafc7efcb7e71e87a7b9c3e72d73c9047b588f1
- TLSH T1D951CD27FDF8DE8550A802215934B008AC9E85F7B76CA59CBECD65819F7398AC7930C7
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
sample.jnlp
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.jnlp
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Extracted
Rule
Java Network Launch Protocol (JNLP)
C2
-
https://ayo-nigeria.accessframe.net/
Targets
-
- Target sample
- Size 2KB
- SHA256 91503910a440feab0e2b50b92d4c6e9255e5128ae497e39c274adea581a98449
- MD5 de433f8323dbe31bc71391c4e6ae8897
- SHA1 141e2a6ab0212bcd5b0c71168e8aeacc4c97517f
- SHA512 8fb6fa8c0f72b57abbd44b8144a91b9ddbbbf2a564a09ca479e886330cd8af730dd0ed8c74a023ffa1c7fa719aafc7efcb7e71e87a7b9c3e72d73c9047b588f1
- TLSH T1D951CD27FDF8DE8550A802215934B008AC9E85F7B76CA59CBECD65819F7398AC7930C7
- MD5 SHA1 SHA512 TLSH
Score4/10