General
- Target sample
- Size 2KB
- Sample260807-zhtrbstbpg
- SHA256 893737fcfd073a8ff5c61f2a1db856fd440442b5299ea6c41f1c828392927b5f
- MD5 130f06417c9c78772ca6076ef2fc3cd6
- SHA1 cd0bc75222f6dc030c3d8db6a0ac2324608e1d9f
- SHA512 8df261faca47e2f398407ca3f1bd7e71dea94a08903ca2a1ea4c1b3b06c7fdfc2ab51ab28350316836b2e13405010c72a15dadb84826d88d948da20321496a04
- TLSH T19F41632359E0C9160374413958C6F04A9AA6C2C3C368ED64F6DDA08D0FC1BD8CEF7399
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260709-en
14 signatures
150 seconds
Malware Config
Targets
-
- Target sample
- Size 2KB
- SHA256 893737fcfd073a8ff5c61f2a1db856fd440442b5299ea6c41f1c828392927b5f
- MD5 130f06417c9c78772ca6076ef2fc3cd6
- SHA1 cd0bc75222f6dc030c3d8db6a0ac2324608e1d9f
- SHA512 8df261faca47e2f398407ca3f1bd7e71dea94a08903ca2a1ea4c1b3b06c7fdfc2ab51ab28350316836b2e13405010c72a15dadb84826d88d948da20321496a04
- TLSH T19F41632359E0C9160374413958C6F04A9AA6C2C3C368ED64F6DDA08D0FC1BD8CEF7399
- MD5 SHA1 SHA512 TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)