General
- Target sample
- Size 9KB
- Sample260808-mwg88syyet
- SHA256 90f600849bfb75fe71e8e86c570f1d2ebbdd5568dce02783a72751ab3735379c
- MD5 3b692e608b2b9511052967916d6fb5f6
- SHA1 76e97104b97507398bc0168bf365b5979776ab60
- SHA512 da93a8e5c04bcf3b157f6fc45d8d80dae2fff40dd4798a2f61c973676272b499ec73129110111e7ae150e4199f914e902982ab33470c9c9b55fbcf89995fe733
- SSDEEP 96:IwPxqd1aeS/tFrFfiLnfsMQgc5fx4+sU8Py5GPbJGzeKaL+vDrzQ0wPRDJqC:30dsBQc4aSGz1cpDJqC
- TLSH T1D4123221B1F864339093C1E2B6A22B6B7FE2D647C94B151032FD4AE54FE3C82DD1352A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
16 signatures
150 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target sample
- Size 9KB
- SHA256 90f600849bfb75fe71e8e86c570f1d2ebbdd5568dce02783a72751ab3735379c
- MD5 3b692e608b2b9511052967916d6fb5f6
- SHA1 76e97104b97507398bc0168bf365b5979776ab60
- SHA512 da93a8e5c04bcf3b157f6fc45d8d80dae2fff40dd4798a2f61c973676272b499ec73129110111e7ae150e4199f914e902982ab33470c9c9b55fbcf89995fe733
- SSDEEP 96:IwPxqd1aeS/tFrFfiLnfsMQgc5fx4+sU8Py5GPbJGzeKaL+vDrzQ0wPRDJqC:30dsBQc4aSGz1cpDJqC
- TLSH T1D4123221B1F864339093C1E2B6A22B6B7FE2D647C94B151032FD4AE54FE3C82DD1352A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of SetThreadContext