General
- Target ShadowOsint.exe
- Size 50.3MB
- Sample260805-cp8shatxcx
- SHA256 3075d5d56f538f03b455611471d9be6646163f1abf7670694b928a4528471560
- MD5 f4aca7b2c55f9dde404740d0218307c2
- SHA1 6f41a38af6ab40afb16544d374fb71abf9061c91
- SHA512 74c0083da39da5c44a2eb40a81f4170d3b558a70edd41720772a5cab1fe3e5303338d7851b0127bc0bffeb1d060ed934dc4bd156c32b40d3bd0fbe320eb09e94
- SSDEEP 393216:Dm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDuUWsNWcxjQNStE:Dm+GCl3zNWclI
- TLSH T16DC78E5277E105A3D4779338CA9B4102F732B4175B34DADB715C03682FABBE04ABA7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ShadowOsint.exe
Resource
win10v2004-20260513-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
ShadowOsint.exe
Resource
win11ltsc2024-20260709-en
0 signatures
150 seconds
Malware Config
Targets
-
- Target ShadowOsint.exe
- Size 50.3MB
- SHA256 3075d5d56f538f03b455611471d9be6646163f1abf7670694b928a4528471560
- MD5 f4aca7b2c55f9dde404740d0218307c2
- SHA1 6f41a38af6ab40afb16544d374fb71abf9061c91
- SHA512 74c0083da39da5c44a2eb40a81f4170d3b558a70edd41720772a5cab1fe3e5303338d7851b0127bc0bffeb1d060ed934dc4bd156c32b40d3bd0fbe320eb09e94
- SSDEEP 393216:Dm+sFHI7EzNFAUYl8XRQo/gCcT5NB35jmxEsYAwDuUWsNWcxjQNStE:Dm+GCl3zNWclI
- TLSH T16DC78E5277E105A3D4779338CA9B4102F732B4175B34DADB715C03682FABBE04ABA7A4
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.