General
- Target sample
- Size 31KB
- Sample260818-dtfsysfb53
- SHA256 2619277fc67733b93efe1bdd87c745864892321d5f6a613a3f457f6ff41734b2
- MD5 cfe7baf34f3391733f2ecf28d8fe4990
- SHA1 d664e3f70dc0009c351ca844444f693e84f9b6f4
- SHA512 ebfa93d6bec04f54cc8b9927109b73e53157e545a829f732c022bfa4092fe58b20cd1bc23090ba9d96076ca6375d7ed09eb1da63077a8f0a1bc3f1dd78ffcc77
- SSDEEP 768:V1kbTwdoPbOOovI48rdcov1BM0jqFntH5a8M:c4yOOovCikB2FntH5tM
- TLSH T1EBE23BA33075A0355723645CF6A7A749B235D403D502D8B9BAFE014C9FCA7A38662BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
sample.html
Resource
win10v2004-20260513-en
17 signatures
300 seconds
Behavioral task
behavioral2
Sample
sample.html
Resource
win11ltsc2024-20260709-en
12 signatures
300 seconds
Malware Config
Targets
-
- Target sample
- Size 31KB
- SHA256 2619277fc67733b93efe1bdd87c745864892321d5f6a613a3f457f6ff41734b2
- MD5 cfe7baf34f3391733f2ecf28d8fe4990
- SHA1 d664e3f70dc0009c351ca844444f693e84f9b6f4
- SHA512 ebfa93d6bec04f54cc8b9927109b73e53157e545a829f732c022bfa4092fe58b20cd1bc23090ba9d96076ca6375d7ed09eb1da63077a8f0a1bc3f1dd78ffcc77
- SSDEEP 768:V1kbTwdoPbOOovI48rdcov1BM0jqFntH5a8M:c4yOOovCikB2FntH5tM
- TLSH T1EBE23BA33075A0355723645CF6A7A749B235D403D502D8B9BAFE014C9FCA7A38662BFC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.