General
- Target 5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458
- Size 761KB
- Sample260422-zsys2aew9j
- SHA256 5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458
- MD5 b8700920dcefd4e22bc27b2c76d21579
- SHA1 0549ba9c00a38accc0cb0106ccb37d049be55259
- SHA512 613e206b8c0a6227035a689cc792177bf7d793c5489fe96e13d8d03f3205ab74c8a856a1433d26e1f772005ebf9005a160dd668028d619490c9d0195d0e375cf
- SSDEEP 12288:2SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:1vO2xJKRw2kOkxSkW298B
- TLSH T152F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458
- Size 761KB
- SHA256 5a7b45880dac3dd7be1c606d427cdac508e11b5fbcfdce24633a04c396307458
- MD5 b8700920dcefd4e22bc27b2c76d21579
- SHA1 0549ba9c00a38accc0cb0106ccb37d049be55259
- SHA512 613e206b8c0a6227035a689cc792177bf7d793c5489fe96e13d8d03f3205ab74c8a856a1433d26e1f772005ebf9005a160dd668028d619490c9d0195d0e375cf
- SSDEEP 12288:2SvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:1vO2xJKRw2kOkxSkW298B
- TLSH T152F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory