General
- Target sample
- Size 5KB
- Sample260726-zhy12s1eng
- SHA256 8c0bf2bd9b404ba6fd46200dfa749180be0cac64bc91cf888238b828343bb0eb
- MD5 22d204c2e13164146d606da47a19908c
- SHA1 ebebb71eca1248b168c7dd8aef3c188995121c5e
- SHA512 1414c8fabfada524bc0b659a5ff7d19a15c01e211459ebe2a1acf60881b414b7235ef042897db525a220a1e492806458e5ad8ccc3cf53cecb96e7fa09fce00da
- SSDEEP 96:PNyDtoXZzIEb0EaW87FC7wdL00EioiCMadk83iSi63/+nr1wYzueh8XiOmw:PNKtkCBh00EioiCtdR3di63y1xy1ixw
- TLSH T140B14BD37E72413693F65BA580FBB29C8222F115BB074559C5E09A6D62ECF0B01B60C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target sample
- Size 5KB
- SHA256 8c0bf2bd9b404ba6fd46200dfa749180be0cac64bc91cf888238b828343bb0eb
- MD5 22d204c2e13164146d606da47a19908c
- SHA1 ebebb71eca1248b168c7dd8aef3c188995121c5e
- SHA512 1414c8fabfada524bc0b659a5ff7d19a15c01e211459ebe2a1acf60881b414b7235ef042897db525a220a1e492806458e5ad8ccc3cf53cecb96e7fa09fce00da
- SSDEEP 96:PNyDtoXZzIEb0EaW87FC7wdL00EioiCMadk83iSi63/+nr1wYzueh8XiOmw:PNKtkCBh00EioiCtdR3di63y1xy1ixw
- TLSH T140B14BD37E72413693F65BA580FBB29C8222F115BB074559C5E09A6D62ECF0B01B60C8
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.