General
- Target تبيعه با فلوس nzf.zip
- Size 621KB
- Sample260723-wp1lnstgrh
- SHA256 d9140bf5ee9495f06bc8a3c37ff3b893c0a40832424e0bd224a7d0b8645c2d75
- MD5 b6ab37b4fee69419a0716928f490eed0
- SHA1 da8d19fda2e086c9a85531e6174f588000a369b9
- SHA512 724cc1f27215248a4ccf0fb362907d2fd9671b98c937d0ecd0a5faa817a2c7aeaf5c0205ba98cda86e3738a0a561bd883f5015cfc2d7b9009e6dd6f506c3880a
- SSDEEP 12288:CbaQq6Tfwj5cMqXmnTZcYcvHNmejUsL0cI1znpNEqqarXk9/SL2dTw+bJ8:CbaQqsucMoOWfnm1L4vaQdxJ8
- TLSH T125D423125CA5F5C7C4BB9EF63DA88B144AAC9D5BBA69816B03AAF1834B0CF11760CD05
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
تبيعه با فلوس nzf/CREATIVE EAX.exe
Resource
win10ltsc2021-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
تبيعه با فلوس nzf/CREATIVE EAX.exe
Resource
win11ltsc2024-20260709-en
12 signatures
150 seconds
Malware Config
Targets
-
- Target تبيعه با فلوس nzf/CREATIVE EAX.exe
- Size 612KB
- SHA256 7f7317053a1e6692efc9a27989a2a875944a388afdf245bb8d434cec91bc8c10
- MD5 b353900241a21029ec2d2cb7a92144f1
- SHA1 903f7a18917ab2cee209baa0043c78c2ec92a32e
- SHA512 0e3675fafe1dee862957c2bfb534b640ffa6fcbb168d5fcc0f605f010461a1045e4d66f2f26d5c289c3f98192453fb0552735e255a9ede4a64f87b36c02acfc3
- SSDEEP 12288:Pkkkkkkkk9c/o90KfC8moMuKQFde/Qe/s0KCBUXAikxIoBNtQ3qSanZr0KF:7qqFdOQOUw9Q34x
- TLSH T144D412D4AEBAC320CE7F1BB888A6AF1313FB351B54D1C15688D658CEA757F111C8264B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.