General
- Target a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c
- Size 832KB
- Sample260421-2ff4kac18k
- SHA256 a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c
- MD5 32220fecccc7e21d956a9b252830b4bc
- SHA1 f96791201cdd44d0d95980609413b6ac17a0c931
- SHA512 68511aff730962f7876e8e6ccf4707a2bf874e38c1bcbf98a2f8e20648561be0660a5fb1deb9777967ef7ad3ab12516092488dcec62c22dbc4dd200b13e5d6e9
- SSDEEP 12288:JSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:wvO2xJKRI2FOkx2LFEAcUY
- TLSH T1DF056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c
- Size 832KB
- SHA256 a404317650ccc07479cd9fd12b5b2480f0c2a0a068cabf7c5c60cbe45d4a053c
- MD5 32220fecccc7e21d956a9b252830b4bc
- SHA1 f96791201cdd44d0d95980609413b6ac17a0c931
- SHA512 68511aff730962f7876e8e6ccf4707a2bf874e38c1bcbf98a2f8e20648561be0660a5fb1deb9777967ef7ad3ab12516092488dcec62c22dbc4dd200b13e5d6e9
- SSDEEP 12288:JSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:wvO2xJKRI2FOkx2LFEAcUY
- TLSH T1DF056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory