d2cfa24d96224590272b9e677c2baf0556ed79ddf41f319fdd23de18f9e44eea

Resubmissions

08/09/2026, 17:04

260908-vlnbhagh347

08/09/2026, 17:01

260908-vjx3xsfj8x7

Sharing

Copy URL Twitter E-mail

General

Target
output-onlinefiletools.txt
Size 32KB
Sample260908-vlnbhagh34
SHA256 d2cfa24d96224590272b9e677c2baf0556ed79ddf41f319fdd23de18f9e44eea
MD5 81b5e3cb26fe4738ccfa97c50d830b28
SHA1 d850ce61d2cb416f11fde2963cab168b4a8029f1
SHA512 fe185620736a631a6da09014cae5d5487c667109e4eb7750f634efc57cc93c06f3a928ae7cacaf7f94214cbb4a80e0904e65435b05b35f32bbe1260516234bd9
SSDEEP 768:D0aQA1pnRJsHbU9+up+Vrh8n4dKWZC4x+d3RLg:Dtzn3sgSOnrl443K
TLSH
T1E6E2D1A1DCBA6A7BAF195ECC450D5BF94883AD333D3050F0EEB2204E951AAD41767429
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery phishing

Malware Config

Targets

- Target
  output-onlinefiletools.txt
- Size 32KB
- SHA256 d2cfa24d96224590272b9e677c2baf0556ed79ddf41f319fdd23de18f9e44eea
- MD5 81b5e3cb26fe4738ccfa97c50d830b28
- SHA1 d850ce61d2cb416f11fde2963cab168b4a8029f1
- SHA512 fe185620736a631a6da09014cae5d5487c667109e4eb7750f634efc57cc93c06f3a928ae7cacaf7f94214cbb4a80e0904e65435b05b35f32bbe1260516234bd9
- SSDEEP 768:D0aQA1pnRJsHbU9+up+Vrh8n4dKWZC4x+d3RLg:Dtzn3sgSOnrl443K
- TLSH
  T1E6E2D1A1DCBA6A7BAF195ECC450D5BF94883AD333D3050F0EEB2204E951AAD41767429
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

7^/10

discovery phishing
- A potential corporate email address has been identified in the URL
  phishing
- Contacts third-party web service commonly abused for C2
  Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Tasks

Resubmissions

Sharing

General

Malware Config

Targets

A potential corporate email address has been identified in the URL

Contacts third-party web service commonly abused for C2

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2