General
- Target dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7
- Size 419KB
- Sample260422-2ntpmadt71
- SHA256 dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7
- MD5 75c84f59b18dd8c71319e2e39b48a43d
- SHA1 334c10f51cabc4e3064656828b519cd71333d19d
- SHA512 3820306beeff02a5d4c314ddc518abd69b23ad6bb092562c264b6561d0753c34075606697231f2ad129bb98e35b144968b82ee5f657724735b8e76c8deae8a32
- SSDEEP 6144:h6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:h6D/WiA3YcyVDLjOkx2LIa
- TLSH T13E947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7
- Size 419KB
- SHA256 dc18c291da4dcf5499ac804c9e1857b69b6367cf6d60868b897d4d51c4b1dde7
- MD5 75c84f59b18dd8c71319e2e39b48a43d
- SHA1 334c10f51cabc4e3064656828b519cd71333d19d
- SHA512 3820306beeff02a5d4c314ddc518abd69b23ad6bb092562c264b6561d0753c34075606697231f2ad129bb98e35b144968b82ee5f657724735b8e76c8deae8a32
- SSDEEP 6144:h6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:h6D/WiA3YcyVDLjOkx2LIa
- TLSH T13E947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory