General
- Target 4WPpgRnbrKEyBAWsMXMlGg.url
- Size 79B
- Sample260809-qmsv6ayblh
- SHA256 36517b91d06b585c467921e1467349ceaec627cd5aaadbe3cbbfb2778b02c61b
- MD5 3600fb9b5be9075d3618166fe6633631
- SHA1 6bf8734af966da244b8dcb6f9e23a3411aed698d
- SHA512 d2d70f74afcf037375c0b16893a9e96bb9735fb2c4f57586b902c48b39ec3a38d0155551a83a83f39647c40e0227054023c8364152663e0a806d340fb857c2ce
- TLSH T1B5A024C1430DC054C407000D31375F10FC571554C4FDF443D340C711144D04344C010D
- MD5 SHA1 SHA512 TLSH
Static task
static1
Behavioral task
behavioral1
Sample
4WPpgRnbrKEyBAWsMXMlGg.url
Resource
win10v2004-20260513-en
17 signatures
150 seconds
Malware Config
Targets
-
- Target 4WPpgRnbrKEyBAWsMXMlGg.url
- Size 79B
- SHA256 36517b91d06b585c467921e1467349ceaec627cd5aaadbe3cbbfb2778b02c61b
- MD5 3600fb9b5be9075d3618166fe6633631
- SHA1 6bf8734af966da244b8dcb6f9e23a3411aed698d
- SHA512 d2d70f74afcf037375c0b16893a9e96bb9735fb2c4f57586b902c48b39ec3a38d0155551a83a83f39647c40e0227054023c8364152663e0a806d340fb857c2ce
- TLSH T1B5A024C1430DC054C407000D31375F10FC571554C4FDF443D340C711144D04344C010D
- MD5 SHA1 SHA512 TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Suspicious use of NtSetInformationThreadHideFromDebugger