General
- Target image.png
- Size 714KB
- Sample261029-2phczstvdv
- SHA256 c0caa75dd3109bb2464a684a8e51e4a34d4b1fc9a2ec6d9fec492b1192484676
- MD5 057d056492d01644c1fed39c8e87b6da
- SHA1 d900ece4bebaf361aa25425cc1c320268ad649e7
- SHA512 009aa92039a8699fa1b77f1eefda1ae8affbb09c7fea73746a204d6bfb1560b6ae71f183569a35848d926c90bbce27141d1ceedcba70f589bba4064d8ea27ab1
- SSDEEP 12288:RMWSQpPLrjzUPxP7I/HTgroneAYLNouYi9yyiNrFAJvjZr8:YQpTzUPxPs/HlnWNXd/1Z8
- TLSH T1DAF4232FC5C45272222BED5A5CF9AF052ACDDB1E3D5048EB8D53F9B3A2009D786C5C29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
Static task
static1
Behavioral task
behavioral1
Sample
image.png
Resource
win10v2004-20260911-en
17 signatures
900 seconds
Behavioral task
behavioral2
Sample
image.png
Resource
win11ltsc2024-20260911-en
3 signatures
900 seconds
Malware Config
Targets
-
- Target image.png
- Size 714KB
- SHA256 c0caa75dd3109bb2464a684a8e51e4a34d4b1fc9a2ec6d9fec492b1192484676
- MD5 057d056492d01644c1fed39c8e87b6da
- SHA1 d900ece4bebaf361aa25425cc1c320268ad649e7
- SHA512 009aa92039a8699fa1b77f1eefda1ae8affbb09c7fea73746a204d6bfb1560b6ae71f183569a35848d926c90bbce27141d1ceedcba70f589bba4064d8ea27ab1
- SSDEEP 12288:RMWSQpPLrjzUPxP7I/HTgroneAYLNouYi9yyiNrFAJvjZr8:YQpTzUPxPs/HlnWNXd/1Z8
- TLSH T1DAF4232FC5C45272222BED5A5CF9AF052ACDDB1E3D5048EB8D53F9B3A2009D786C5C29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score6/10-
Contacts third-party web service commonly abused for C2
Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.
-
Drops file in System32 directory