Extracted

• • Target
    New folder.rar
  • Size 942B
  • SHA256 91e3c1000abdcaba21557f97958dda34f9a1e9694a0483999c607ad45f655de4
  • MD5 9fe5f28fc0b69bf707458223feb83bd2
  • SHA1 3de2efb606c7fa41106dcc44dffdce57ae8cc29d
  • SHA512 ccf0b0e5eca5b5777df9000a1c75269e2beda3069385b680c1aad351d1fe8d9571def33fdea2fb7587523d95ac98f43152c859f5b3a9776a762a304aca9dd631
  • TLSH
    T15311C8C0B43762A1AF00016EC417EA4FDC0775DFF04BA32D4DC7794A121A900AC09DD4
  • MD5 SHA1 SHA512 TLSH

  Score

  10^/10

  • Badlisted process makes network request

    Network request originating from process or tool commonly abused by malware.

  • Suspicious clipboard content.

    A suspicious script was copied to clipboard.

  • Contacts third-party web service commonly abused for C2

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  behavioral1
• • Target
    New folder/New Text Document.txt
  • Size 2KB
  • SHA256 6c98007664fe18240fb2a62c2f95809dc7b05383bdfdfc757182bce224e759e8
  • MD5 66b1d9529fa5d1f05a64ee702fde0955
  • SHA1 1ce60b68781b465f7a280184a74dc5af5a468a16
  • SHA512 8c98da2a400eeb7a6cd94773a51ef5b82e6db979e5c49b3b655dc1868cf33dd0f90e9b501bcaf08c8575d2cd27f0321dc2f081561b28db7567ceb79e93524ed3
  • TLSH
    T176413569CE74F9E403AEB1A0D9322E5730D91A63D7B55EBCC64604A60D2434ACF2B3DC
  • MD5 SHA1 SHA512 TLSH

  Score

  1^/10
  behavioral2