General
- Target 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
- Size 2.4MB
- Sample260421-lyklpscv5m
- SHA256 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
- MD5 4b6ac738416db0acb4c9b211c498094c
- SHA1 648790917e611984fd6f50df94bb4b6f0a2fe9bb
- SHA512 93e62d564d859a3f1c49d076e8e78b8fd75493562857907de05a37462173876c6e0dc87102b29a6ca0dbe050c6914c9fff9e4ce6ca15d0021c006a5c7e44d244
- SSDEEP 49152:ZHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:ZnKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T1EDB58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
- Size 2.4MB
- SHA256 8b709d68d187d489af3262bda46351ba4022c77b3f8f51a68fb240e954b6cadf
- MD5 4b6ac738416db0acb4c9b211c498094c
- SHA1 648790917e611984fd6f50df94bb4b6f0a2fe9bb
- SHA512 93e62d564d859a3f1c49d076e8e78b8fd75493562857907de05a37462173876c6e0dc87102b29a6ca0dbe050c6914c9fff9e4ce6ca15d0021c006a5c7e44d244
- SSDEEP 49152:ZHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:ZnKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T1EDB58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory