General
- Target d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04
- Size 615KB
- Sample260506-kwtadset2s
- SHA256 d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04
- MD5 485ec3db99cb7fde8d8835ffb2a19f56
- SHA1 7478977a1c0c4571362e0dc9ce050aaee138546b
- SHA512 17ca013d0c7407bcdc1827d77525426aaf37f43616b541b8261ebdc4370796bd222f75cf9282fa8a32eea0a09ca181c442791791a93ed9b897a76438c9f4c11a
- SSDEEP 12288:qSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:xvO2xJKRI2FOkx2LFicUV
- TLSH T19BD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04
- Size 615KB
- SHA256 d0f29c4d6a9762dc2bebaf8b59924d79c4e33f4ba71d5705a0cbbcf96ec77d04
- MD5 485ec3db99cb7fde8d8835ffb2a19f56
- SHA1 7478977a1c0c4571362e0dc9ce050aaee138546b
- SHA512 17ca013d0c7407bcdc1827d77525426aaf37f43616b541b8261ebdc4370796bd222f75cf9282fa8a32eea0a09ca181c442791791a93ed9b897a76438c9f4c11a
- SSDEEP 12288:qSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:xvO2xJKRI2FOkx2LFicUV
- TLSH T19BD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory