General
- Target 527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a
- Size 395KB
- Sample260503-xpdbtaa13q
- SHA256 527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a
- MD5 dac0b3f2cdb7e6846850ff0822571524
- SHA1 e0e0fe09a1cdbf011fcda1c49a94290bec4b844d
- SHA512 6bd8068a88e195f8c27182f6d66a1fb9ed00606f3d517aab57ed44962540663bf883b4361e4607370833e202108c9339a9bc27fadabfb6bd6ad2c0c0892ae092
- SSDEEP 6144:Tw6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:TQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T183846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a
- Size 395KB
- SHA256 527ab799fc75776d8b858b18d05b6dc5b07bb60d792944b670261be813b1668a
- MD5 dac0b3f2cdb7e6846850ff0822571524
- SHA1 e0e0fe09a1cdbf011fcda1c49a94290bec4b844d
- SHA512 6bd8068a88e195f8c27182f6d66a1fb9ed00606f3d517aab57ed44962540663bf883b4361e4607370833e202108c9339a9bc27fadabfb6bd6ad2c0c0892ae092
- SSDEEP 6144:Tw6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:TQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T183846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory