General
- Target Spooky paid.zip
- Size 46.0MB
- Sample261007-zsfbpavyhs
- SHA256 cddc74f319808a7a6d0d5d60a7d74f984763bdb41d77e59ec2d010cd0fb2ed77
- MD5 76cac09c4c8fb63c283ee1fadb7a216d
- SHA1 e4b33863a8bf6f9b1721e2ce389885645c7c5ec8
- SHA512 1e9713dd0848f801c605ef04e101f83b0b2d2677e8c45b3677e5d5c7503e0512736bc51f4631d47bcc4755dffbcd500ab9577562d3422c445c91727a68234d3b
- SSDEEP 786432:NgXZrCT0kw00Rr45LLu8KP0D00kOoRWD87/ycstJBQC2b28i73lwUiPOo:yXZrCTvb04yP+ERWY7/yXvBQXyltiPv
- TLSH T18EB73313F04A18FFA7CB45AC95244468DF685CEAA70EC87ECFE64699CD7D68491C30CA
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Behavioral task
behavioral1
Sample
Spooky V6.5.exe
Resource
win10v2004-20260911-en
14 signatures
150 seconds
Behavioral task
behavioral2
Sample
Spooky V6.5.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target Spooky V6.5.exe
- Size 8.6MB
- SHA256 08b763e79a4870c76190e701420f8d28040b30307156f11d56e09714fe6d975a
- MD5 261f34271eb8a935778dbe973b7d8ba9
- SHA1 d66ca9b3ced199be44f9a399edd196225892e0d6
- SHA512 24c540c1239341933d90014b91af2957d80909750dbefe054a024931ec75787fc82311b9aab89e9f1b70648ce51265418abe5afd4f6d0fce3cadd577d37e10df
- SSDEEP 196608:EKrMoHiIVVenG0tFv7rqbu/G+tyuwW857IvOXQzIELFr1v3npux6TndhYvXcNhRi:EKrMoHiIVVoG0tFv7r6cG+tyuwW857IS
- TLSH T12E96DF237351E429DA7C06F06A254F9595F6670F4930C9FA388C63BD2BF26C8B2943D6
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.