General
- Target Rollback-Spotify
- Size 249KB
- Sample261002-gexdyayhke
- SHA256 bc08384a2d9eedc37538beb2ca834fa25ddd38825b78ccba8f7f34450ec03580
- MD5 57ef2cfbc74c7924c17cef48171e1426
- SHA1 fb4d91c5483f37e276ff5af1fe8927ac7f67c79f
- SHA512 b319d313d8594c0b0f879149780449e18aa151e91ab8d523c43f29cc28981f561e6acbb1c74016e0c24de9e287c7ad5fe10972d65e9800333d052558277c2699
- SSDEEP 6144:kj5UfwSbpAk0/2db+J/BghCv0Rtw/sN2HPPUTKPOG0PCEyK6SKimOUzObAuHOYJo:k1UfwSbpAj/2db+J/BghCv0Rtw/sN2HP
- TLSH T10F44E8B1B071D23E019F529BF5B0A750D3D7A69BC64969E2C03FC6E882D2C88F7A3155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
Rollback-Spotify.html
Resource
win10v2004-20260911-en
11 signatures
900 seconds
Behavioral task
behavioral2
Sample
Rollback-Spotify.html
Resource
win11ltsc2024-20260911-en
12 signatures
900 seconds
Malware Config
Targets
-
- Target Rollback-Spotify
- Size 249KB
- SHA256 bc08384a2d9eedc37538beb2ca834fa25ddd38825b78ccba8f7f34450ec03580
- MD5 57ef2cfbc74c7924c17cef48171e1426
- SHA1 fb4d91c5483f37e276ff5af1fe8927ac7f67c79f
- SHA512 b319d313d8594c0b0f879149780449e18aa151e91ab8d523c43f29cc28981f561e6acbb1c74016e0c24de9e287c7ad5fe10972d65e9800333d052558277c2699
- SSDEEP 6144:kj5UfwSbpAk0/2db+J/BghCv0Rtw/sN2HPPUTKPOG0PCEyK6SKimOUzObAuHOYJo:k1UfwSbpAj/2db+J/BghCv0Rtw/sN2HP
- TLSH T10F44E8B1B071D23E019F529BF5B0A750D3D7A69BC64969E2C03FC6E882D2C88F7A3155
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.