General
- Target c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e
- Size 615KB
- Sample260508-1pr2raex7x
- SHA256 c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e
- MD5 70e4cc210aa89f0b672087daea20ed40
- SHA1 ad7849bfda48ebcc98907dba560431a6889843cf
- SHA512 45d3730f74a74955c07f997f2f3f944dbb5ea7338ab065d77aef0e5b191c00488de94f1c6d7e186b7fbb59a0f3fea0b15b16fd3a4f3fe38c3f52d27b0fba3491
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:ZvO2xJKRI2FOkx2LFicUV
- TLSH T187D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e.exe
Resource
win11-20260130-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e
- Size 615KB
- SHA256 c3aa2bf8f969445b0d0ff04f59fa2508847953cc5aac0f39bdd05b1c27c1fe3e
- MD5 70e4cc210aa89f0b672087daea20ed40
- SHA1 ad7849bfda48ebcc98907dba560431a6889843cf
- SHA512 45d3730f74a74955c07f997f2f3f944dbb5ea7338ab065d77aef0e5b191c00488de94f1c6d7e186b7fbb59a0f3fea0b15b16fd3a4f3fe38c3f52d27b0fba3491
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:ZvO2xJKRI2FOkx2LFicUV
- TLSH T187D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory