General
-
Target
db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d
-
Size
7.2MB
-
Sample
231212-l66h5scfd5
-
MD5
c2e7581309233bb25f100355a2dece84
-
SHA1
8f648eaa57bcf86352d7cfa521e5deb478457d34
-
SHA256
db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d
-
SHA512
996aacd82c59fd83a8e73511d0f91c14d6fa4ac76f2d285d2c632155350980101311d51b531707ea56dd5d034dda4d070d1e82e82970a8939af2423c2a42fdea
-
SSDEEP
196608:Sxm5xCJOyhaLRyatbRgZIWFhoPd9qRvnTyGofmyq1zj:pcOycyKbf6i+E+P1zj
Static task
static1
Behavioral task
behavioral1
Sample
db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d.exe
Resource
win10v2004-20231130-en
Malware Config
Targets
-
-
Target
db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d
-
Size
7.2MB
-
MD5
c2e7581309233bb25f100355a2dece84
-
SHA1
8f648eaa57bcf86352d7cfa521e5deb478457d34
-
SHA256
db3002bafbd859e3589e45f2cebf63a7f840f5d27708f43c4885c4a4b6c5ff8d
-
SHA512
996aacd82c59fd83a8e73511d0f91c14d6fa4ac76f2d285d2c632155350980101311d51b531707ea56dd5d034dda4d070d1e82e82970a8939af2423c2a42fdea
-
SSDEEP
196608:Sxm5xCJOyhaLRyatbRgZIWFhoPd9qRvnTyGofmyq1zj:pcOycyKbf6i+E+P1zj
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-