General
- Target rsignn.siin
- Size 16KB
- Sample260809-pjfwraep2x
- SHA256 cf03d4e2f05bd47af91af2d724d94adfaa4485c75a9aedf78a1c0b0ef6ab2e66
- MD5 18e6a923657497cd0a5528decfa3b0a9
- SHA1 c159a638e71270a3f004ca8967662ae8dda5227e
- SHA512 69eef84df1f106391ba36b09ec6566e286ecb3ad620f5bf5139640f1c2224c9e60a6aaa5c51a9c6cb113a9fe3043035884192a9c3f185c42f4b6079b2b920077
- SSDEEP 384:9OAc1YSWxrd30zIgi+iGMPizici+ib30KB0L:IAc/Wxrx0CPSWRP70W0L
- TLSH T123729216B8850A921933A3A9AF76870DFF66411B4600C7187DED76929F71F0AE523FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
rsignn.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
rsignn.html
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target rsignn.siin
- Size 16KB
- SHA256 cf03d4e2f05bd47af91af2d724d94adfaa4485c75a9aedf78a1c0b0ef6ab2e66
- MD5 18e6a923657497cd0a5528decfa3b0a9
- SHA1 c159a638e71270a3f004ca8967662ae8dda5227e
- SHA512 69eef84df1f106391ba36b09ec6566e286ecb3ad620f5bf5139640f1c2224c9e60a6aaa5c51a9c6cb113a9fe3043035884192a9c3f185c42f4b6079b2b920077
- SSDEEP 384:9OAc1YSWxrd30zIgi+iGMPizici+ib30KB0L:IAc/Wxrx0CPSWRP70W0L
- TLSH T123729216B8850A921933A3A9AF76870DFF66411B4600C7187DED76929F71F0AE523FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.