General
- Target 84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6
- Size 1.8MB
- Sample260415-ymdegaby3x
- SHA256 84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6
- MD5 20308f7ab9ef71dd5e8c86f278028ee9
- SHA1 9a677ade5dd491ae9e9f9af1cc52057bc2baa0b3
- SHA512 24a9d5f7d5a730ae2dc2aed904c0bb21590cbe9cc0c10b2aeda7b77bfec2111a72cb9ddd5a0b7527edb6c5cf102b685471beb7ddd06479ee43d5161e32dc3b77
- SSDEEP 49152:eHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:enKdtWsM0r1QnxK4e
- TLSH T14385AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6
- Size 1.8MB
- SHA256 84e6165b1d04c42af6d389eb268d09f416b30a8dd5e88d7a781889e270e14dd6
- MD5 20308f7ab9ef71dd5e8c86f278028ee9
- SHA1 9a677ade5dd491ae9e9f9af1cc52057bc2baa0b3
- SHA512 24a9d5f7d5a730ae2dc2aed904c0bb21590cbe9cc0c10b2aeda7b77bfec2111a72cb9ddd5a0b7527edb6c5cf102b685471beb7ddd06479ee43d5161e32dc3b77
- SSDEEP 49152:eHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:enKdtWsM0r1QnxK4e
- TLSH T14385AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory