General
- Target e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197
- Size 395KB
- Sample260421-bbef3agx6q
- SHA256 e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197
- MD5 5bd2a427357fad65685a3e1b3341f62d
- SHA1 8cf397550055e8061cc3389d5f04124115a95eae
- SHA512 123d03ca20427b75377ffeb60eaf7e9d3618a32bd7840818dd693579b2ade295a1a9e7b247f7b671c76415eb468272e6a2e53592d3b1be3392f66bbe3af4e137
- SSDEEP 6144:FWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:FkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1DE846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197
- Size 395KB
- SHA256 e788b91f64dc0004fb7316240af5996f0f26b5dd41f1dec3806de5ec0c1fa197
- MD5 5bd2a427357fad65685a3e1b3341f62d
- SHA1 8cf397550055e8061cc3389d5f04124115a95eae
- SHA512 123d03ca20427b75377ffeb60eaf7e9d3618a32bd7840818dd693579b2ade295a1a9e7b247f7b671c76415eb468272e6a2e53592d3b1be3392f66bbe3af4e137
- SSDEEP 6144:FWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:FkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1DE846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory