General
- Target osint-feed-v3.5-alpha.3.zip
- Size 1KB
- Sample260724-agetcaxxcz
- SHA256 5dadaaf70eeb3acf8f599b0fb3f8e4829099b5658c3cbbded391dad5d0c92a74
- MD5 8e5eb5de86dbb2b920833e56b01fcfa7
- SHA1 5d7dba057d0276e6ca37d603bd5b808dda7695bd
- SHA512 307be647cae6546248a5bd9e52b7951a3c9c150d48f0e9e542acb1329142276c2ec0b51d01e43867ba919b9ca06ee239f3c5fc2a2cc7b43ee391ea1dcde416c1
- TLSH T13D313EDB92F22005E90758A92B9237081E349147A287CCFE35ED4744CF8C8A0CBA779D
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
osint-feed-v3.5-alpha.3.html
Resource
win10v2004-20260513-en
13 signatures
150 seconds
Behavioral task
behavioral2
Sample
osint-feed-v3.5-alpha.3.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target osint-feed-v3.5-alpha.3.zip
- Size 1KB
- SHA256 5dadaaf70eeb3acf8f599b0fb3f8e4829099b5658c3cbbded391dad5d0c92a74
- MD5 8e5eb5de86dbb2b920833e56b01fcfa7
- SHA1 5d7dba057d0276e6ca37d603bd5b808dda7695bd
- SHA512 307be647cae6546248a5bd9e52b7951a3c9c150d48f0e9e542acb1329142276c2ec0b51d01e43867ba919b9ca06ee239f3c5fc2a2cc7b43ee391ea1dcde416c1
- TLSH T13D313EDB92F22005E90758A92B9237081E349147A287CCFE35ED4744CF8C8A0CBA779D
- MD5 SHA1 SHA512 TLSH
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.