General
- Target 47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d
- Size 615KB
- Sample260428-yn7ppses2t
- SHA256 47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d
- MD5 dc11a013956e8d5220d2e329bc9e3ce6
- SHA1 c64519060bf7b1da4af7df6d4b65b60d2de514ae
- SHA512 3e8dcb51c5cf6dc879a21b695830165407a6c1b44804a08a6f23cce80929df73ea0a8b05977f4b212e1c73460372a1bb5226fb0710f137c4c0b7e4a4d61f8dbc
- SSDEEP 12288:ZSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:gvO2xJKRI2FOkx2LFicUV
- TLSH T174D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d
- Size 615KB
- SHA256 47938af5b3dfd00cc6dbadeebf688179828ca1f29374fe3c1cd2832e1020569d
- MD5 dc11a013956e8d5220d2e329bc9e3ce6
- SHA1 c64519060bf7b1da4af7df6d4b65b60d2de514ae
- SHA512 3e8dcb51c5cf6dc879a21b695830165407a6c1b44804a08a6f23cce80929df73ea0a8b05977f4b212e1c73460372a1bb5226fb0710f137c4c0b7e4a4d61f8dbc
- SSDEEP 12288:ZSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:gvO2xJKRI2FOkx2LFicUV
- TLSH T174D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory