General
- Target file
- Size 325KB
- Sample260723-qv3ekabb97
- SHA256 e9ee8cfe9a46eb866af7cf4e9acc75529890b44e2a8cdae27986952723625f07
- MD5 cbcf51fef63df50482a007f824f9d3b4
- SHA1 1511b3f05ee73c4cbd2e0b65ffe8106d4b57c089
- SHA512 a9c181152ea732b1c59daa2e91a6baabbb1f428b736927e5d59222132899c81371b28c0fde616f03058d875c80643fbedf7a20fb06dbf8810ae5a10853f43fae
- SSDEEP 3072:zYqgAkHnjzxQ6KSAiTBHf88aW+LN7uxRLlzglKMf2xnl:ngAkHnjzxQBSAW/88CN78BMf2xnl
- TLSH T1F1643C25E5D2607F682B8033F27F3318B73FA483A101C969BA1CC5D5AFD19862177B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
file.html
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Malware Config
Targets
-
- Target file
- Size 325KB
- SHA256 e9ee8cfe9a46eb866af7cf4e9acc75529890b44e2a8cdae27986952723625f07
- MD5 cbcf51fef63df50482a007f824f9d3b4
- SHA1 1511b3f05ee73c4cbd2e0b65ffe8106d4b57c089
- SHA512 a9c181152ea732b1c59daa2e91a6baabbb1f428b736927e5d59222132899c81371b28c0fde616f03058d875c80643fbedf7a20fb06dbf8810ae5a10853f43fae
- SSDEEP 3072:zYqgAkHnjzxQ6KSAiTBHf88aW+LN7uxRLlzglKMf2xnl:ngAkHnjzxQBSAW/88CN78BMf2xnl
- TLSH T1F1643C25E5D2607F682B8033F27F3318B73FA483A101C969BA1CC5D5AFD19862177B99
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Enumerates connected drives
Attempts to read the root path of hard drives other than the default C: drive.