General
- Target Rebel.exe
- Size 16.7MB
- Sample260828-1ph4vatema
- SHA256 e58f0a7a288447a72f78aa696a5db2fd74d38c5b5a5d7c2575b9a88ceff05eb7
- MD5 9b7432dafb468bc2136646413d4cfdf4
- SHA1 9becf808d316436964802c395563d38743640d56
- SHA512 a8377b69ca2673da42aefbad1b5d9b1235007b3ea25e548ae10db5ecb2a93922c7b61d3115049721b7002040ad514738533e30196bbfc8fb29c3111746674f16
- SSDEEP 393216:SLKUfl8ak5Rx5Dt8NGAQk5zkLrddWvkSXu/R2Q2R:iKUf0vt8w/JxkVXu/R/
- TLSH T1CD07338500620897FB0D5176E49B516B332BF0594B18FBDBC608AB39ACF11DF096DB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Rebel.exe
Resource
win10v2004-20260513-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
Rebel.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target Rebel.exe
- Size 16.7MB
- SHA256 e58f0a7a288447a72f78aa696a5db2fd74d38c5b5a5d7c2575b9a88ceff05eb7
- MD5 9b7432dafb468bc2136646413d4cfdf4
- SHA1 9becf808d316436964802c395563d38743640d56
- SHA512 a8377b69ca2673da42aefbad1b5d9b1235007b3ea25e548ae10db5ecb2a93922c7b61d3115049721b7002040ad514738533e30196bbfc8fb29c3111746674f16
- SSDEEP 393216:SLKUfl8ak5Rx5Dt8NGAQk5zkLrddWvkSXu/R2Q2R:iKUf0vt8w/JxkVXu/R/
- TLSH T1CD07338500620897FB0D5176E49B516B332BF0594B18FBDBC608AB39ACF11DF096DB7A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.