General
- Target 2026-08-14_6fb4c2b16fcb8b2d41e5892b624aa984_blankgrabber_cobalt-strike_glassworm_icedid_njrat_satacom
- Size 24.2MB
- Sample260814-mdrd7a1djf
- SHA256 a63ef291f1e9fb97e865a3fd6f65847baf1051fecd369a4792abc48a26b2a4f6
- MD5 6fb4c2b16fcb8b2d41e5892b624aa984
- SHA1 40c630824b2b74ad4ee9b782775f19aa7b8225a1
- SHA512 9476b34ce1475532583c779e31c1cb63cbec375df4ebeb2701bdac2cfa38912196932736967190d1997b5c11a0b2a5f6f5d83b440aab47e519b47e478de95382
- SSDEEP 786432:mXzbS4ce2s7EBmWodmUJAzRphP10Mk8EajFDvUr5P:ma4f/+GJAzPh90xxZ5P
- TLSH T1164733A97A5101FBE1E5413A89FBC862F3A3368B0764C2EB035494761E776E0AD3CF54
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Behavioral task
behavioral1
Sample
RetracCheatsV4.pyc
Resource
win10v2004-20260513-en
16 signatures
900 seconds
Behavioral task
behavioral2
Sample
RetracCheatsV4.pyc
Resource
win11ltsc2024-20260709-en
4 signatures
900 seconds
Malware Config
Targets
-
- Target RetracCheatsV4.pyc
- Size 52KB
- SHA256 0563d74a446ca0c3a337339533754936adcffd9eaf74e7c34b3a3626985ee7f4
- MD5 ac957510c07db180c0f88b5c7c7f686a
- SHA1 ea61f62b40ae37968b475991f034551146e3e616
- SHA512 6486f0c63862e01438c47f8c7622bb880d64c7061bca8fd5fe7b90efb792b0817ea1a97a9d4da90a1b748ea0b3e10c2bf7a3b7bf3517bf99be7bc7691ef01e45
- SSDEEP 768:use9rTZdthBh+lYqqg1fv3uVV7Rt8DTNk/HgoDA:usArTZdnBlqqgNPc7R9Hgh
- TLSH T125332AB9D524A13FEDECF03471EA99C57B218282B1048347F5344C79BEC9329AAE971D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.