General
- Target aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6
- Size 395KB
- Sample260501-l8gmssh19p
- SHA256 aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6
- MD5 1767e322e6cce3074037df214b6193b3
- SHA1 a1b7649ad96ab92e42abd485e58c6d76f7b9e4ee
- SHA512 25b43792aa9fa125bf387c8cbec7fc263a9b343e043bab55f68ed58d4ce6d5ea2e7c163f9a5d14ff135daf514115c850fa7b04b8354575421e3131e7bf41cb9c
- SSDEEP 6144:qQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:q39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T115847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6
- Size 395KB
- SHA256 aa68503857c94bb391207ec943025fc18e2aad34ee6df879dac40cccade9c1b6
- MD5 1767e322e6cce3074037df214b6193b3
- SHA1 a1b7649ad96ab92e42abd485e58c6d76f7b9e4ee
- SHA512 25b43792aa9fa125bf387c8cbec7fc263a9b343e043bab55f68ed58d4ce6d5ea2e7c163f9a5d14ff135daf514115c850fa7b04b8354575421e3131e7bf41cb9c
- SSDEEP 6144:qQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:q39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T115847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory