General
- Target DORAT.zip
- Size 10.9MB
- Sample260910-xwgmtafq4v
- SHA256 648b0a152c2b0f2129f2f0c4440dae18e13287f841c9b05e21075a3601f1461c
- MD5 36fded97fe2231844823add24f8f96ae
- SHA1 386cb796c78717dbf98d8be8edb075406350510b
- SHA512 efc6f399b680146eece44a25f71a1bcd67cfeaa95a984c13aadf39226c7794ba9fdc334cc5896a29dc0511292467023080d5b25a735a43a19b900bc78fc7d510
- SSDEEP 196608:mzs6yWbwdbhmLULnJjl3DDTcv3XS8gkq+cH1Ij8xim7fTckIDHQVLojbgz0i8s4T:Cny99mLSnJjlzDTKXrtcH1Ihm77cHQBa
- TLSH T156B633E9E92C6702E512AFF75BC3C357C2D5A1228FD1571F2A8900C09C961EF7A27369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
DORAT.zip
Resource
win10ltsc2021-20260513-en
18 signatures
900 seconds
Behavioral task
behavioral2
Sample
DORAT.zip
Resource
win11-20260513-en
0 signatures
900 seconds
Malware Config
Targets
-
- Target DORAT.zip
- Size 10.9MB
- SHA256 648b0a152c2b0f2129f2f0c4440dae18e13287f841c9b05e21075a3601f1461c
- MD5 36fded97fe2231844823add24f8f96ae
- SHA1 386cb796c78717dbf98d8be8edb075406350510b
- SHA512 efc6f399b680146eece44a25f71a1bcd67cfeaa95a984c13aadf39226c7794ba9fdc334cc5896a29dc0511292467023080d5b25a735a43a19b900bc78fc7d510
- SSDEEP 196608:mzs6yWbwdbhmLULnJjl3DDTcv3XS8gkq+cH1Ij8xim7fTckIDHQVLojbgz0i8s4T:Cny99mLSnJjlzDTKXrtcH1Ihm77cHQBa
- TLSH T156B633E9E92C6702E512AFF75BC3C357C2D5A1228FD1571F2A8900C09C961EF7A27369
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.