General
- Target Terrorist activities in Cambodia 07.29.2026.7z
- Size 18.7MB
- Sample260730-rr5k7atvgw
- SHA256 7e4420e487e1398f3b554fc20c069433df24c3883caae35125be1802e25849b3
- MD5 9a6f3e4b4f8ead2ab0a2532ad500fdb5
- SHA1 2b14a58ebcf538a39998d1066ec20b3ba88cfdbb
- SHA512 db5143c6dfc25bb3369b3e1c0a002b24e9ec11a59187b5440fa96e3d1f10410fa0de56de7764e39ebbe7e525f37f680bed3c8c2d4c387d6d3bf5be7d887fecc9
- SSDEEP 393216:uT6LNC27yIM95niKgT+H4+T2dQkVt0uOtTJ1sj9ElPQpPCO:uT6ZD7K95no6Yo0QkVtnIJQ9APQPCO
- TLSH T13C173380DAEECBB573C248FA32633D92C8D47E241B3DE5B57642D593429EB5AC5243B0
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Terrorist activities in Cambodia 07.29.2026.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
Terrorist activities in Cambodia 07.29.2026.exe
Resource
win11ltsc2024-20260709-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Terrorist activities in Cambodia 07.29.2026.exe
- Size 20.8MB
- SHA256 7958a2b378ae08a2f018365d43614fd38ef51863ca46841ebb9670e71510ba0e
- MD5 87d416f944514d90dd1232d9de44268e
- SHA1 695f4efa157c43633708f0165e7aa19e7594bf20
- SHA512 e985a31a8e72ab466a7afc5d615f7d3bfff7bfb9750a7699053df9673f7d33438a91720055198fefc49a8231b5a127e057b42f853118b778d57dd1e3955fa1f0
- SSDEEP 393216:rzcqZSATrz71MrfoGyUip54VMtrwVjtycGPr3c9cvEU8YlizK:7b/z6rfoewGa1wVjtNS3jvF8kizK
- TLSH T160271213F389A53ED46B1A36593785909837B6207D528CD7B7FC3E4C8F391802E2A766
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Outbound SSH connection to public host
SSH is used for remote access. This may indicate SSH host discovery, encrypted C2 traffic, or data exfiltration.