General
- Target message (54).txt
- Size 64KB
- Sample260730-w1rg5sel41
- SHA256 5458d30794634242489b6be5e9ff8be1890a2ecdb3aa54af802ab88732922de0
- MD5 7068ea0b2896e755e266a4c66986fa0a
- SHA1 db10d5e7b7aa9f32a9b21509178a23c6fd9066f4
- SHA512 615c34b2935cd505b48328369c46195f250f5456559622ce72b70e4cc3b265aac4a41de389c7785d0f264cd1b1a6208d0f89b0b84b65e228835b49de9fc6d2a8
- SSDEEP 768:DvjRb9SCfiREQ+AAxGxj/Y01mYN4Kedm90dt+1G1OBAMTpru7whhLmI9r1E:DvB9SiiREQ+AAxGxj/DmYN4lUGhGvLW
- TLSH T1F453B5EFA51621518933B37DAF6B6308FF3351635542C6A07EEC92900FB28169266FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
message (54).html
Resource
win10v2004-20260513-en
15 signatures
300 seconds
Behavioral task
behavioral2
Sample
message (54).html
Resource
win11ltsc2024-20260710-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target message (54).txt
- Size 64KB
- SHA256 5458d30794634242489b6be5e9ff8be1890a2ecdb3aa54af802ab88732922de0
- MD5 7068ea0b2896e755e266a4c66986fa0a
- SHA1 db10d5e7b7aa9f32a9b21509178a23c6fd9066f4
- SHA512 615c34b2935cd505b48328369c46195f250f5456559622ce72b70e4cc3b265aac4a41de389c7785d0f264cd1b1a6208d0f89b0b84b65e228835b49de9fc6d2a8
- SSDEEP 768:DvjRb9SCfiREQ+AAxGxj/Y01mYN4Kedm90dt+1G1OBAMTpru7whhLmI9r1E:DvB9SiiREQ+AAxGxj/DmYN4lUGhGvLW
- TLSH T1F453B5EFA51621518933B37DAF6B6308FF3351635542C6A07EEC92900FB28169266FDC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.