General
- Target ysnek5ddfe
- Size 962KB
- Sample260817-ferysatcla
- SHA256 155fb0d13b90b78733d22a4d5d9babe5721b7ab0638cac6ec22149502d7b2c37
- MD5 91deef1d1dd047dcd963c7bac269e345
- SHA1 8f6830cd9bd81622d26f33c60d8336e7380d3f23
- SHA512 60cbd56c0dbe0aab017e108605e8f4f566ca497b60571753d4b9cf44433cb5c0cf122a066e7d3450fd89c0ea102aa677ab012b6238b440548e3c40cbd1740da8
- SSDEEP 12288:Jjulo+FMNBz2xOwebEhMN1m16TKmeWpVO9/6fpfyak:Jjulo+FMNZ2xOwebNTKmjO9/Qk
- TLSH T1C9255A9A729B203646E720746AAF13063235405BC809C514FE7CD6C43FA5E5A96BBFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
ysnek5ddfe.html
Resource
win10v2004-20260513-en
11 signatures
150 seconds
Behavioral task
behavioral2
Sample
ysnek5ddfe.html
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ysnek5ddfe
- Size 962KB
- SHA256 155fb0d13b90b78733d22a4d5d9babe5721b7ab0638cac6ec22149502d7b2c37
- MD5 91deef1d1dd047dcd963c7bac269e345
- SHA1 8f6830cd9bd81622d26f33c60d8336e7380d3f23
- SHA512 60cbd56c0dbe0aab017e108605e8f4f566ca497b60571753d4b9cf44433cb5c0cf122a066e7d3450fd89c0ea102aa677ab012b6238b440548e3c40cbd1740da8
- SSDEEP 12288:Jjulo+FMNBz2xOwebEhMN1m16TKmeWpVO9/6fpfyak:Jjulo+FMNZ2xOwebNTKmjO9/Qk
- TLSH T1C9255A9A729B203646E720746AAF13063235405BC809C514FE7CD6C43FA5E5A96BBFFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.