General
- Target Diversion-3.6.7.zip
- Size 21.6MB
- Sample260815-ahawsavzb1
- SHA256 10ece09b733e92bc700897f767d8c1598c6b90675bc6fea1d28ddacafb1d2c8a
- MD5 7aa6076051ed364e984acbe748b6411b
- SHA1 1281b0f4546bfed1753bce544e928960d1ba2dad
- SHA512 9aba6fd434e277d1e89fb6d606ca8a40f98adc7f7556784182574acbbc0691efc26ad3cf9f830ea71c5ce4b3f3d3a735a2f003f8dbdb42ca8b784d7e11fe2524
- SSDEEP 393216:hslUbcnBfKTIK3PxTpAyfQz263DqG0GXN/K8PqGjSkETNdaep9DsqXJHv+qbyf3U:hscCfQ7HAyIN3DqGHpP5ZETNdaep9Ds4
- TLSH T1DE3733FCDDC4AF63B8A9592D21E88F4062F122587E8472BC0E46ADB06D3D5160FA14F7
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Diversion.exe
Resource
win10v2004-20260513-en
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Diversion.exe
Resource
win11ltsc2024-20260709-en
5 signatures
150 seconds
Malware Config
Targets
-
- Target Diversion.exe
- Size 22.1MB
- SHA256 bfab5f7c40b28d79001c256f43760d6748b265650cdda10407a36bcde2d15d6b
- MD5 373ec267c6ebac5f47e578b179c636a8
- SHA1 a16e443c80f10cbe118ee4549870973875295ae0
- SHA512 f6af51e34ce4adeff0a2d8d198edbd042ca89ba2f25c52cd5caaa9495b675e39467bcca2955feeac8f59d7f8013cab3a6a4d8a73354b9695bb6bcb66038df321
- SSDEEP 393216:Z8don7L1F9SxgIfUKOc0/XEAphVt+5IwQSg+IeXZzC+ltTNvF7G0C/YldV:Z8+pvQ58KPyRphMBo+IaZzFltpvF7RV
- TLSH T1B3373399BB504E26F8AA123C65D48B16A2F1FD601F5287EF0BF139441D3B2D48F746E2
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.