General
- Target 8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f
- Size 832KB
- Sample260507-xe4e9acy9n
- SHA256 8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f
- MD5 29fb751a6b93e4b274e794c75d49199b
- SHA1 3f059d0b96c71b2b442f2a35f67df785d2036cde
- SHA512 de87d4a37b6b5194f553f972425d628f91c1ba434d4577274a4987370b012204a46bb2c6223994e85e4805aaf30158566f4a33e71e1ee23e11dff0759995fc12
- SSDEEP 12288:FSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:kvO2xJKRI2FOkx2LFEAcUY
- TLSH T16D056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f
- Size 832KB
- SHA256 8ee9a14964cfa3a40f88df5f73d9e2672360ab0a5f9f887b0548d87a85fd8e5f
- MD5 29fb751a6b93e4b274e794c75d49199b
- SHA1 3f059d0b96c71b2b442f2a35f67df785d2036cde
- SHA512 de87d4a37b6b5194f553f972425d628f91c1ba434d4577274a4987370b012204a46bb2c6223994e85e4805aaf30158566f4a33e71e1ee23e11dff0759995fc12
- SSDEEP 12288:FSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:kvO2xJKRI2FOkx2LFEAcUY
- TLSH T16D056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory