Analysis
-
max time network
509s -
platform
windows10-2004_x64 -
resource
win10v2004-20221111-en -
resource tags
arch:x64arch:x86image:win10v2004-20221111-enlocale:en-usos:windows10-2004-x64system -
submitted
25/11/2022, 23:32
Static task
static1
Behavioral task
behavioral1
Sample
relefnyiy_press_za_3_mesyatsa_tfile_ru.exe
Resource
win7-20221111-en
Behavioral task
behavioral2
Sample
relefnyiy_press_za_3_mesyatsa_tfile_ru.exe
Resource
win10v2004-20221111-en
Errors
General
-
Target
relefnyiy_press_za_3_mesyatsa_tfile_ru.exe
-
Size
506KB
-
MD5
a1a1b7155198c49ee42ec1f4ee498752
-
SHA1
6f4ae37246c576c9be27118ec3b5c8430f7e35a2
-
SHA256
65aa39d520ec75c49ed715793f865b752b7919a918bc2da5a12a72e02c99e05b
-
SHA512
54fe02d4fcd571e1e55b4ef84ea235ec03ce366aab56031800cc0c0ad76ac228bb04eb8fd5aa829829e9f17fde4062f08bf0fff13419b4e77a20d900fd1f9770
-
SSDEEP
6144:9Dl3g6oREAIDFYUkRmuWLPp+rPGo8spnFme4rYDQ7Z9vYFgXcu5/QxhR/WTEouyI:9D1g6IEtvkt8W8Mh+YMiiviHGI
Malware Config
Signatures
-
Unexpected DNS network traffic destination 3 IoCs
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
description ioc Destination IP 162.159.36.2 Destination IP 162.159.36.2 Destination IP 162.159.36.2