General
- Target cookies.json
- Size 204KB
- Sample260724-b11qlaeq3t
- SHA256 ca31e89714a15d05bb99e4bdfba9558010cf45118c7933eed457bd277f8fa4c0
- MD5 e5a02357532298b8888876e53db1a6e4
- SHA1 c5b917df1ba0bf19c6d81c34e9ec0a77fe592637
- SHA512 e3183f3a1c3c00b5e25597523b63626d63469798778f9373e33a047780582f14524fe48b7d35fa2cde8052d0063571c7286ec10f3a8bc3a1262bf0675b4c9b22
- SSDEEP 3072:qpWWkRXKNV44WNwzozkl4aLKyvflOiX0xuhopNGI84E:NXKNV44WNwzoz44aLPOiX0xuGGUE
- TLSH T13F1464AE61D3481FCD3B0B25BE451FAD76643E53D1E8FDD9CC788488EAC1A1921218E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
Behavioral task
behavioral1
Sample
cookies.json
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
cookies.json
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Extracted
Language
-
hta
Source
URLs
-
hta.dropper
https://viprigger.app
Targets
-
- Target cookies.json
- Size 204KB
- SHA256 ca31e89714a15d05bb99e4bdfba9558010cf45118c7933eed457bd277f8fa4c0
- MD5 e5a02357532298b8888876e53db1a6e4
- SHA1 c5b917df1ba0bf19c6d81c34e9ec0a77fe592637
- SHA512 e3183f3a1c3c00b5e25597523b63626d63469798778f9373e33a047780582f14524fe48b7d35fa2cde8052d0063571c7286ec10f3a8bc3a1262bf0675b4c9b22
- SSDEEP 3072:qpWWkRXKNV44WNwzozkl4aLKyvflOiX0xuhopNGI84E:NXKNV44WNwzoz44aLPOiX0xuGGUE
- TLSH T13F1464AE61D3481FCD3B0B25BE451FAD76643E53D1E8FDD9CC788488EAC1A1921218E7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.