General
- Target 2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c
- Size 618KB
- Sample260424-2cmryaet3p
- SHA256 2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c
- MD5 d0274a5597e053d4c2ed9369739df347
- SHA1 79beaf529e8775bf4f5538efced004ab989c73ea
- SHA512 08815336a370d9ed3a56c5a7d954989146fa63eabd7015bcd599f5bc964f7b55f9ad26068331bfe19edc67a042233751dc982a48055bb345753c8f8e06f8a962
- SSDEEP 12288:eqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ejHPOSOkx2LFscUQPxW
- TLSH T154D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c.exe
Resource
win10v2004-20260130-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c
- Size 618KB
- SHA256 2bd0e1959b94a77345d98c7a578e856f319383974388da8218a1bca592d86a8c
- MD5 d0274a5597e053d4c2ed9369739df347
- SHA1 79beaf529e8775bf4f5538efced004ab989c73ea
- SHA512 08815336a370d9ed3a56c5a7d954989146fa63eabd7015bcd599f5bc964f7b55f9ad26068331bfe19edc67a042233751dc982a48055bb345753c8f8e06f8a962
- SSDEEP 12288:eqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:ejHPOSOkx2LFscUQPxW
- TLSH T154D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory