General
- Target 49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb
- Size 511KB
- Sample260508-2fynlsay5l
- SHA256 49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb
- MD5 b6e33115b8a5fb262dfbd5f97049ef22
- SHA1 9f83f6b408f6cd105ca507c3aea3a52d8b556a3b
- SHA512 8f00fe131913627111875c3e94bf3706b722c594fa7c7294f3dc859046e94b3c91e71ace3cea96ed0a4cecbc26be2f727d4fc0304e486ceb0f4559913b9f0abc
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T151B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb.exe
Resource
win11-20250619-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb
- Size 511KB
- SHA256 49b52fe73e0b50eec6addc0c2fc7a1fd70bc93a7aa275e6d592c1bc35960d2bb
- MD5 b6e33115b8a5fb262dfbd5f97049ef22
- SHA1 9f83f6b408f6cd105ca507c3aea3a52d8b556a3b
- SHA512 8f00fe131913627111875c3e94bf3706b722c594fa7c7294f3dc859046e94b3c91e71ace3cea96ed0a4cecbc26be2f727d4fc0304e486ceb0f4559913b9f0abc
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T151B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory