General
- Target 21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957
- Size 871KB
- Sample260418-zn2dcsf19m
- SHA256 21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957
- MD5 7f54e2c6ee86ffe9fd299c4eb5f694b4
- SHA1 23d49caf33af692110f06781415f686e61753f5c
- SHA512 3a9243b1d463ac592d719ec30cfadd20af62f45cd894eddb1568ec6cf02fc7ee858279197c22da5ead5a9335a82d25b041b70472d03e3479b3521a5a94feeaad
- SSDEEP 12288:5SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:AvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T1DC156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957
- Size 871KB
- SHA256 21e618697a349431f17baaa77e3923ba88437da5c37b9c24e681421c8b58e957
- MD5 7f54e2c6ee86ffe9fd299c4eb5f694b4
- SHA1 23d49caf33af692110f06781415f686e61753f5c
- SHA512 3a9243b1d463ac592d719ec30cfadd20af62f45cd894eddb1568ec6cf02fc7ee858279197c22da5ead5a9335a82d25b041b70472d03e3479b3521a5a94feeaad
- SSDEEP 12288:5SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:AvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T1DC156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory