General
- Target 1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f
- Size 511KB
- Sample260424-lr9bgset4s
- SHA256 1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f
- MD5 213d3a9a7d8ffc5f4dc45ee187190f55
- SHA1 99d2a8696a20cc59fe6f7d3f68f817fa881315b2
- SHA512 466c06f998cae0aff1f1bd08ed882183f5bd0bcd93b0c58ffc41043200451ab013b8003717d3599d1824d89b9a05e0f29b97b894671700430f1b74cdae57a431
- SSDEEP 6144:1cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:1SvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T187B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f
- Size 511KB
- SHA256 1df1aed549131cfdec5ecedc05bcccf70dd06931b0a50ff4c15b66458449db7f
- MD5 213d3a9a7d8ffc5f4dc45ee187190f55
- SHA1 99d2a8696a20cc59fe6f7d3f68f817fa881315b2
- SHA512 466c06f998cae0aff1f1bd08ed882183f5bd0bcd93b0c58ffc41043200451ab013b8003717d3599d1824d89b9a05e0f29b97b894671700430f1b74cdae57a431
- SSDEEP 6144:1cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:1SvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T187B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory