General
- Target Script-Ware.zip
- Size 3.8MB
- Sample260730-d5a2vack91
- SHA256 77e307748b17f05bf2740441346a34bf468281dcd6c12c315b619e1c787b0fea
- MD5 5fd2fd029a9093477c091549866dba20
- SHA1 21cae6f871549907b45914eaf144ad9ecc7dbf0d
- SHA512 7bf9cef107d621a0051645251e8e3dfd231567e0bd7c4d61644cfebd9d7104e131bc703fae4a239e276ce89abf6929527704e222b49748eddd6a430b2dbe303b
- SSDEEP 98304:riQjuZ5eWBD3aOX+OVqryEcH7ya4DD0/P:rxjw5BBD3aOXLIrJcH7yTD4X
- TLSH T18D0633B25753025F8651CB3725CC1E0027EF3CDF822DAFB0A56B25A2D56581BDEC42E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
Script-Ware.zip
Resource
win10v2004-20260513-en
18 signatures
900 seconds
Malware Config
Targets
-
- Target Script-Ware.zip
- Size 3.8MB
- SHA256 77e307748b17f05bf2740441346a34bf468281dcd6c12c315b619e1c787b0fea
- MD5 5fd2fd029a9093477c091549866dba20
- SHA1 21cae6f871549907b45914eaf144ad9ecc7dbf0d
- SHA512 7bf9cef107d621a0051645251e8e3dfd231567e0bd7c4d61644cfebd9d7104e131bc703fae4a239e276ce89abf6929527704e222b49748eddd6a430b2dbe303b
- SSDEEP 98304:riQjuZ5eWBD3aOX+OVqryEcH7ya4DD0/P:rxjw5BBD3aOXLIrJcH7yTD4X
- TLSH T18D0633B25753025F8651CB3725CC1E0027EF3CDF822DAFB0A56B25A2D56581BDEC42E9
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Downloads MZ/PE file
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
ConfuserEx .NET packer
Detects ConfuserEx .NET packer.