General
- Target 0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926
- Size 743KB
- Sample260424-2em6gset7l
- SHA256 0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926
- MD5 80c87219a7ad7f4f0b95360d39635f05
- SHA1 84cd81ab6b0dc67355174c32fb97af17e9689307
- SHA512 2b00e8590c63e2ef4c5c13ec860b5daa0c3bdad0423c84337c8de189df273deb3184a6a2a87755ca243a8db1d4c998f2ecee270ec1c44883c5e3bfd3047de856
- SSDEEP 12288:ASvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikG8:bvO2xJKRI2FOkx2LFEvcU68
- TLSH T1CBF45A31E2418036D5B34576C6FA0BBFB5647D25131165CBA3C8BA262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926
- Size 743KB
- SHA256 0ed645d98e8e659942cc8e32e6e6ca0579eadcbc5f7de204c21138b2c6f78926
- MD5 80c87219a7ad7f4f0b95360d39635f05
- SHA1 84cd81ab6b0dc67355174c32fb97af17e9689307
- SHA512 2b00e8590c63e2ef4c5c13ec860b5daa0c3bdad0423c84337c8de189df273deb3184a6a2a87755ca243a8db1d4c998f2ecee270ec1c44883c5e3bfd3047de856
- SSDEEP 12288:ASvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikG8:bvO2xJKRI2FOkx2LFEvcU68
- TLSH T1CBF45A31E2418036D5B34576C6FA0BBFB5647D25131165CBA3C8BA262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory