General
- Target 36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399
- Size 2.6MB
- Sample260424-2a24vaes7k
- SHA256 36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399
- MD5 e6447e6df0979703bc6df27dca9c3f3c
- SHA1 4c5b4e4876fdf724ac47c7699d6c12362ad885d7
- SHA512 acb7faccd759f45f31b1d162d2887f1055ccafc1d3b8745e98a816d64adaeed71e41a139e9288c2d990a33258b3dbc46a7be748c84ebb16223ee6aad83d2fe99
- SSDEEP 49152:ITGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:IKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1DFC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399
- Size 2.6MB
- SHA256 36ad7c96ea04825389fd8c71276202fcc4d46befda23eca7ee8278d26d9db399
- MD5 e6447e6df0979703bc6df27dca9c3f3c
- SHA1 4c5b4e4876fdf724ac47c7699d6c12362ad885d7
- SHA512 acb7faccd759f45f31b1d162d2887f1055ccafc1d3b8745e98a816d64adaeed71e41a139e9288c2d990a33258b3dbc46a7be748c84ebb16223ee6aad83d2fe99
- SSDEEP 49152:ITGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:IKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1DFC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory