General
- Target rsignn.ned
- Size 16KB
- Sample260819-pkg57sfa82
- SHA256 ce8b58273588cbf111ed640924a2c3269c787f3fe363cfb6e71a3d8acddb281a
- MD5 abe11ea3a6f8d971c7d5804945ba3500
- SHA1 7976a6b0474744d72f8628303f046799c9d1c062
- SHA512 a7849a2266c592cd704f27d5dcad22a617fe7522293b55f7c563f7d5dcfe0dc22dbddce95c0230d5b4a013fc800acd31382cffb56e172005de007322a43b9c15
- SSDEEP 384:9OAc1YSWxrd30zIgi+i+fPizici+ib30KB0y:IAc/Wxrx0CP+CWRP70W0y
- TLSH T119729216B8850A921933A3A9AF76870DFF66411B4600C7187DED76929F71F0AE523FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
rsignn.html
Resource
win10v2004-20260513-en
12 signatures
150 seconds
Behavioral task
behavioral2
Sample
rsignn.html
Resource
win11ltsc2024-20260709-en
11 signatures
150 seconds
Malware Config
Targets
-
- Target rsignn.ned
- Size 16KB
- SHA256 ce8b58273588cbf111ed640924a2c3269c787f3fe363cfb6e71a3d8acddb281a
- MD5 abe11ea3a6f8d971c7d5804945ba3500
- SHA1 7976a6b0474744d72f8628303f046799c9d1c062
- SHA512 a7849a2266c592cd704f27d5dcad22a617fe7522293b55f7c563f7d5dcfe0dc22dbddce95c0230d5b4a013fc800acd31382cffb56e172005de007322a43b9c15
- SSDEEP 384:9OAc1YSWxrd30zIgi+i+fPizici+ib30KB0y:IAc/Wxrx0CP+CWRP70W0y
- TLSH T119729216B8850A921933A3A9AF76870DFF66411B4600C7187DED76929F71F0AE523FCC
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.