General
- Target rebel.exe
- Size 63.7MB
- Sample260828-n8cd7axcla
- SHA256 936b3f51355011d0244eb95fb057c57b6abdaba98627bf2c9ef47edc878eaa79
- MD5 c858625b34f9a56f3958af86f98dc8e8
- SHA1 fedf5f758be02b605fa091dff5123211b2bd6af7
- SHA512 f3bfd47ac61610df512b1fcb62b1f5f0556de0d967a46442e79735ef491d56efa04acd1baa91cc6b7b8b597bef581ece27e51955ac70d96ea8b78925ea3bc973
- SSDEEP 786432:GYxQiSiid+fXAevRghwDSsQn3WsPt8ga0iBI:GYxQiSis+fXA7hwDRQn3Ws
- TLSH T1A4E7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
rebel.exe
Resource
win10v2004-20260513-en
8 signatures
300 seconds
Malware Config
Targets
-
- Target rebel.exe
- Size 63.7MB
- SHA256 936b3f51355011d0244eb95fb057c57b6abdaba98627bf2c9ef47edc878eaa79
- MD5 c858625b34f9a56f3958af86f98dc8e8
- SHA1 fedf5f758be02b605fa091dff5123211b2bd6af7
- SHA512 f3bfd47ac61610df512b1fcb62b1f5f0556de0d967a46442e79735ef491d56efa04acd1baa91cc6b7b8b597bef581ece27e51955ac70d96ea8b78925ea3bc973
- SSDEEP 786432:GYxQiSiid+fXAevRghwDSsQn3WsPt8ga0iBI:GYxQiSis+fXA7hwDRQn3Ws
- TLSH T1A4E7724C24500AE4915BE815EAABCF1B5FE9DADB5BE8244DBCA88E740CD3CB71D1074B
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.