General
- Target rosreborn
- Size 28KB
- Sample261026-tm3l5sty3j
- SHA256 7f5352bf93f673b0a4fce9536b2c16277506b29fec3b27a2bb5749f9e2924c06
- MD5 18d5e1c37799a45e72020356b814eafe
- SHA1 d943d95afcf9ce69435ef71ad44be86285ad7c1c
- SHA512 4758b72907232efe731928ed717c098cb3aae404f66a1f204c6db9e9ff12fc696a24c40aa68b5ec888189909e41d5d6e97f4509bf5647b4a1d8646f5fb4a32b4
- SSDEEP 192:cbJeYIkwDqelBzjH0niN1AoMZoVNyJJgM1POj4PKT2Zd5QuytmrWuz0aETEcE6w1:cAYBENlBz7wiN1IoVN+gyBtY/Tnx/0
- TLSH T102D21267EC0889AC61313E8ABC7AF0DDC185710F8C6AD934B2BA561F1521FC946A7C73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
rosreborn.html
Resource
win10v2004-20260911-en
10 signatures
900 seconds
Behavioral task
behavioral2
Sample
rosreborn.html
Resource
win11ltsc2024-20260911-en
10 signatures
900 seconds
Malware Config
Targets
-
- Target rosreborn
- Size 28KB
- SHA256 7f5352bf93f673b0a4fce9536b2c16277506b29fec3b27a2bb5749f9e2924c06
- MD5 18d5e1c37799a45e72020356b814eafe
- SHA1 d943d95afcf9ce69435ef71ad44be86285ad7c1c
- SHA512 4758b72907232efe731928ed717c098cb3aae404f66a1f204c6db9e9ff12fc696a24c40aa68b5ec888189909e41d5d6e97f4509bf5647b4a1d8646f5fb4a32b4
- SSDEEP 192:cbJeYIkwDqelBzjH0niN1AoMZoVNyJJgM1POj4PKT2Zd5QuytmrWuz0aETEcE6w1:cAYBENlBz7wiN1IoVN+gyBtY/Tnx/0
- TLSH T102D21267EC0889AC61313E8ABC7AF0DDC185710F8C6AD934B2BA561F1521FC946A7C73
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.