General
- Target Nebula.exe
- Size 2.5MB
- Sample261014-jpc46afb82
- SHA256 b339f8b04a3ed4f7bec0c2d47f7d19afc98021208e05b10ad88e67108633b445
- MD5 12c09ec3a37f219328a244f0d120fba3
- SHA1 d7ae2b7e196071a09d72f3208ad053f08732cb9f
- SHA512 6161968d23befec3b92c5ece057c72adb8a786b7e4f61b730ea7d36b9194d643c92af2a996af892848d53943e9044ca60e8193bdcbf003b55667f08349c41397
- SSDEEP 49152:cv4LGo+rBKQRdYqOF0+8OlghYzFrU7nhfEr+:0QtO+3
- TLSH T1C1C51987D7F741E4C176E138A242722BF5323419873893E76BD44B5A4BA67E0DABE310
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
Nebula.exe
Resource
win10v2004-20260911-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target Nebula.exe
- Size 2.5MB
- SHA256 b339f8b04a3ed4f7bec0c2d47f7d19afc98021208e05b10ad88e67108633b445
- MD5 12c09ec3a37f219328a244f0d120fba3
- SHA1 d7ae2b7e196071a09d72f3208ad053f08732cb9f
- SHA512 6161968d23befec3b92c5ece057c72adb8a786b7e4f61b730ea7d36b9194d643c92af2a996af892848d53943e9044ca60e8193bdcbf003b55667f08349c41397
- SSDEEP 49152:cv4LGo+rBKQRdYqOF0+8OlghYzFrU7nhfEr+:0QtO+3
- TLSH T1C1C51987D7F741E4C176E138A242722BF5323419873893E76BD44B5A4BA67E0DABE310
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.