General
- Target coclf3.webp
- Size 18KB
- Sample260930-sgbe2axcnh
- SHA256 bb85a8ebb022b7f6752962c704ef9267b22d74636d8a19f4e98cb64e8e230d84
- MD5 140007f334c8b5d321e0c844c2941404
- SHA1 92e0d5e3431fa5d6ef23fe646bd4983bdd376c60
- SHA512 05ee64fed1d41eab0192b327bd5c399dbd0d65743810f959b217371dd0c9b0ef1fd54034ef069b8ed2ca83ca93afcf872c07f440480bea30a472984f34e18731
- SSDEEP 384:HzeRQfV+9so+/QIV6CbmF6F2jDaQbBdpH9zvztIs+T/YVsr/Xdu8p5:H6UogVtqxDaQlnHNmxTgch5
- TLSH T1B882D05950502F7BCC9A7CEA46632697A1AE3F644124E7B8320CEB3D31652A0FCDE15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
Behavioral task
behavioral1
Sample
coclf3.webp
Resource
win10v2004-20260911-en
11 signatures
600 seconds
Behavioral task
behavioral2
Sample
coclf3.webp
Resource
win11ltsc2024-20260911-en
10 signatures
600 seconds
Malware Config
Targets
-
- Target coclf3.webp
- Size 18KB
- SHA256 bb85a8ebb022b7f6752962c704ef9267b22d74636d8a19f4e98cb64e8e230d84
- MD5 140007f334c8b5d321e0c844c2941404
- SHA1 92e0d5e3431fa5d6ef23fe646bd4983bdd376c60
- SHA512 05ee64fed1d41eab0192b327bd5c399dbd0d65743810f959b217371dd0c9b0ef1fd54034ef069b8ed2ca83ca93afcf872c07f440480bea30a472984f34e18731
- SSDEEP 384:HzeRQfV+9so+/QIV6CbmF6F2jDaQbBdpH9zvztIs+T/YVsr/Xdu8p5:H6UogVtqxDaQlnHNmxTgch5
- TLSH T1B882D05950502F7BCC9A7CEA46632697A1AE3F644124E7B8320CEB3D31652A0FCDE15F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Loads dropped DLL
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.