General
- Target 01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec
- Size 395KB
- Sample260508-ymemjagy7p
- SHA256 01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec
- MD5 5aa49b1d1bd140d129d874f46dbff361
- SHA1 b2e485fdf15b9ccfd89db6ee14a07f667fd4f436
- SHA512 de48e86d3c8e290f868aecb28404dac55ef207c939ef4a03ffd07de4f19bc20a8344eff9a3685fa93ae6e675f1e5067e09e7882e57b0d87181a66e7daa4cb06b
- SSDEEP 6144:5w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:5Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T185846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec.exe
Resource
win11-20250619-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec
- Size 395KB
- SHA256 01ca94e64e8b4436b7394f76b45319ca902316ed55df62cec4d7e97203a3d8ec
- MD5 5aa49b1d1bd140d129d874f46dbff361
- SHA1 b2e485fdf15b9ccfd89db6ee14a07f667fd4f436
- SHA512 de48e86d3c8e290f868aecb28404dac55ef207c939ef4a03ffd07de4f19bc20a8344eff9a3685fa93ae6e675f1e5067e09e7882e57b0d87181a66e7daa4cb06b
- SSDEEP 6144:5w6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:5Q7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T185846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory