General
- Target astermail-recovery-codes-1787811057393.txt
- Size 869B
- Sample260831-l39rdsssc1
- SHA256 58ba7a5dfa5e4fec1fca7c4c679b023b90ba799c65eb275293f866431073a907
- MD5 851e2ee9dac31116bdd1350becba1340
- SHA1 7344574f44e8391a5c1d41068518abbff6722fb7
- SHA512 715434815a061244da4a3f4fb27364c5c9dbb740ddba0333330459fdc2bc1024ba3c358ff4af84e9405d4fc42db32e93b29d104ef09de36e292b861732ad764a
- TLSH T16311AB4DE5C9ACF925933CBB200BF66D64F2758CEAC531FC0AA1426030EB9112E0418D
- MD5 SHA1 SHA512 TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
astermail-recovery-codes-1787811057393.txt
Resource
win10v2004-20260513-en
15 signatures
900 seconds
Behavioral task
behavioral2
Sample
astermail-recovery-codes-1787811057393.txt
Resource
win11ltsc2024-20260709-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target astermail-recovery-codes-1787811057393.txt
- Size 869B
- SHA256 58ba7a5dfa5e4fec1fca7c4c679b023b90ba799c65eb275293f866431073a907
- MD5 851e2ee9dac31116bdd1350becba1340
- SHA1 7344574f44e8391a5c1d41068518abbff6722fb7
- SHA512 715434815a061244da4a3f4fb27364c5c9dbb740ddba0333330459fdc2bc1024ba3c358ff4af84e9405d4fc42db32e93b29d104ef09de36e292b861732ad764a
- TLSH T16311AB4DE5C9ACF925933CBB200BF66D64F2758CEAC531FC0AA1426030EB9112E0418D
- MD5 SHA1 SHA512 TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops desktop.ini file(s)