General
- Target 9f598a-AddonWeaponsBuilder-1.2.zip
- Size 16.2MB
- Sample260802-vpgm5attev
- SHA256 d1b4a8db540ce080d639fcc8339fa63e803441384d0f7828c01a8e95b9a1d387
- MD5 be2cfc78d9dd09937aab4c0d1d023f43
- SHA1 e2d0a2e01c82239c01ad02cbfe3c3426d1f1fbb4
- SHA512 17f3d93ee199c5049442954aae79425a96540af0e9f3512067ea1a27f0072644a601f80caced3fa3e9e3f5e9127c27df0785c9dda80ed4ecdc352ca6a1948585
- SSDEEP 393216:DfkfSGJ7qItfcrNfzyeSuhHY27AD+7ec2fE7onLjazbgP45RFVapAWI4nFGzPLjf:Du7Y0fc13+oAD+7ezEo0PWIJz
- TLSH T1CA0733BEC59809B2CD47433194DD1A867E6E7B022A02DCB33465CB62516689CFF3DE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
9f598a-AddonWeaponsBuilder-1.2.zip
Resource
win11ltsc2024-20260709-en
22 signatures
600 seconds
Malware Config
Targets
-
- Target 9f598a-AddonWeaponsBuilder-1.2.zip
- Size 16.2MB
- SHA256 d1b4a8db540ce080d639fcc8339fa63e803441384d0f7828c01a8e95b9a1d387
- MD5 be2cfc78d9dd09937aab4c0d1d023f43
- SHA1 e2d0a2e01c82239c01ad02cbfe3c3426d1f1fbb4
- SHA512 17f3d93ee199c5049442954aae79425a96540af0e9f3512067ea1a27f0072644a601f80caced3fa3e9e3f5e9127c27df0785c9dda80ed4ecdc352ca6a1948585
- SSDEEP 393216:DfkfSGJ7qItfcrNfzyeSuhHY27AD+7ec2fE7onLjazbgP45RFVapAWI4nFGzPLjf:Du7Y0fc13+oAD+7ezEo0PWIJz
- TLSH T1CA0733BEC59809B2CD47433194DD1A867E6E7B022A02DCB33465CB62516689CFF3DE1B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory