General
- Target 0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0
- Size 395KB
- Sample260418-k64twact2l
- SHA256 0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0
- MD5 55a11960aeccdc0f4f17a15d269b6049
- SHA1 d7e43644fd87f0c4c6db739a32b9493e8c56ed07
- SHA512 145d960f80da72d84fe968f66f4ccce9cfedcba04e46dd36e4ed7d49716e2c13e8a6efee921da3f496e28156a29909d9d5cd1044b9e4a3c0490e81769a7e0ba2
- SSDEEP 6144:hw6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:hQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T1FE846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0
- Size 395KB
- SHA256 0bed6a1ab916ed85c5cce43ed5ab272789a6517836a6117a12f1dba6b8a209e0
- MD5 55a11960aeccdc0f4f17a15d269b6049
- SHA1 d7e43644fd87f0c4c6db739a32b9493e8c56ed07
- SHA512 145d960f80da72d84fe968f66f4ccce9cfedcba04e46dd36e4ed7d49716e2c13e8a6efee921da3f496e28156a29909d9d5cd1044b9e4a3c0490e81769a7e0ba2
- SSDEEP 6144:hw6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:hQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T1FE846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory