General
- Target piggyoink.png
- Size 13KB
- Sample260930-ryfweasyg1
- SHA256 16279bd722f454a99dc7b86c65f1a9f884a049df42c52463a9b6d6ea577dc4f9
- MD5 b91c9e11555ef2a937acf2f927b8f31f
- SHA1 8451377e9d881e1fa466af8f5c7138c685c75bb0
- SHA512 f7fcd3efd225f3cf1a2df98381bf28e172d02b452eeab1db6687678eabc21d457f0b59b7a68c5dbe5eb55434755125aacf4a7fe1dc498e9de2dd299f716d5f57
- SSDEEP 384:4NhFr7xjbCGTGY/koETo4npp2L6vxEl6l:IFRCoss4pcixR
- TLSH T1FA52BFE0DB8C9C27ECD2D59BC1301101704F907D4AE9FD1A89A9EC63F65076309DE54C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
piggyoink.png
Resource
win10v2004-20260911-en
15 signatures
150 seconds
Behavioral task
behavioral2
Sample
piggyoink.png
Resource
win11ltsc2024-20260911-en
3 signatures
150 seconds
Malware Config
Targets
-
- Target piggyoink.png
- Size 13KB
- SHA256 16279bd722f454a99dc7b86c65f1a9f884a049df42c52463a9b6d6ea577dc4f9
- MD5 b91c9e11555ef2a937acf2f927b8f31f
- SHA1 8451377e9d881e1fa466af8f5c7138c685c75bb0
- SHA512 f7fcd3efd225f3cf1a2df98381bf28e172d02b452eeab1db6687678eabc21d457f0b59b7a68c5dbe5eb55434755125aacf4a7fe1dc498e9de2dd299f716d5f57
- SSDEEP 384:4NhFr7xjbCGTGY/koETo4npp2L6vxEl6l:IFRCoss4pcixR
- TLSH T1FA52BFE0DB8C9C27ECD2D59BC1301101704F907D4AE9FD1A89A9EC63F65076309DE54C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Looks up external IP address via web service
Uses a legitimate IP lookup service to find the infected system's external IP.