General
- Target hero.njk
- Size 24KB
- Sample260804-c3erksep4v
- SHA256 2f81f4976e7b3d43d37c43300433215cc1322e877c0a2119fd7d51210005fd83
- MD5 667891119d1fc0d83afcac4d4f0b00f6
- SHA1 35af1eeddbbc68c27bd1f8d14ea1e1ef75e82486
- SHA512 3dc3c7ec1ae6437435b1311ce92ccd969e67f96f39ae83d4ba0c7fd5b8451c32a6e00e35651bfa58543e5ced8e6ad5db065a79030982f308f65fc3c046881a87
- SSDEEP 192:YGqfwSnb8EgeAwSSnvSG/jfcjOX9zPkX1a9gVAREGkW1h+MAJrGjnWQUfTRbSKPm:ofhb8hLwHvSIjf2aEGkGzi7bnjMT9
- TLSH T1CAB2B758D9F90428347BC0B46AF34B953B7CD047CD89CA2C73ED23946F49EC5A9A3688
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Behavioral task
behavioral1
Sample
hero.js
Resource
win10v2004-20260513-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
hero.js
Resource
win11ltsc2024-20260709-en
1 signatures
150 seconds
Malware Config
Targets
-
- Target hero.njk
- Size 24KB
- SHA256 2f81f4976e7b3d43d37c43300433215cc1322e877c0a2119fd7d51210005fd83
- MD5 667891119d1fc0d83afcac4d4f0b00f6
- SHA1 35af1eeddbbc68c27bd1f8d14ea1e1ef75e82486
- SHA512 3dc3c7ec1ae6437435b1311ce92ccd969e67f96f39ae83d4ba0c7fd5b8451c32a6e00e35651bfa58543e5ced8e6ad5db065a79030982f308f65fc3c046881a87
- SSDEEP 192:YGqfwSnb8EgeAwSSnvSG/jfcjOX9zPkX1a9gVAREGkW1h+MAJrGjnWQUfTRbSKPm:ofhb8hLwHvSIjf2aEGkGzi7bnjMT9
- TLSH T1CAB2B758D9F90428347BC0B46AF34B953B7CD047CD89CA2C73ED23946F49EC5A9A3688
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.