General
- Target virus.html
- Size 62KB
- Sample260730-vngazasgpf
- SHA256 947d3b1b978523a3c659eead259c459812b6fa1aa88ebc37013657bc24363ac6
- MD5 e65f7d24f733ea4ca2d0cc6b5889dbc1
- SHA1 7da64916ce58e3ce27896de7d78ff80c735b70ba
- SHA512 f6b99777f2c536bb2f93f8d400fcd01e98059dd9bcaf2d69ad7d453769aadd4db39b640ec4b5e873b2a91ad3517aa3fabe59e48a1ba687867d4385a486da6b0e
- SSDEEP 1536:Z/B9SxmNEQ+AAxGxG6DmYN44M9zJRLDjy:9SmDhJaJRW
- TLSH T1E15395AF665211218933B7BDAF575308FB339167524282A47EFCD2401FB2462D6A2FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
virus.html
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
virus.html
Resource
win11ltsc2024-20260709-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target virus.html
- Size 62KB
- SHA256 947d3b1b978523a3c659eead259c459812b6fa1aa88ebc37013657bc24363ac6
- MD5 e65f7d24f733ea4ca2d0cc6b5889dbc1
- SHA1 7da64916ce58e3ce27896de7d78ff80c735b70ba
- SHA512 f6b99777f2c536bb2f93f8d400fcd01e98059dd9bcaf2d69ad7d453769aadd4db39b640ec4b5e873b2a91ad3517aa3fabe59e48a1ba687867d4385a486da6b0e
- SSDEEP 1536:Z/B9SxmNEQ+AAxGxG6DmYN44M9zJRLDjy:9SmDhJaJRW
- TLSH T1E15395AF665211218933B7BDAF575308FB339167524282A47EFCD2401FB2462D6A2FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.