General
- Target f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c
- Size 1024KB
- Sample260511-yas96ahs2x
- SHA256 f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c
- MD5 8a9f12e8b34028601d9944a644faef9a
- SHA1 4a82e32027cdccfcc652a8f21046e421f08c81aa
- SHA512 8afdcbdd32720b48d86789a0e965a5ba6f11112828708fe781b7f081dce790dd28c8e01597c40e13db7242da8903f0693811b3d1fc775c447fcc22c1f87a9315
- SSDEEP 24576:5jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:5TGkQyhuTtS0rQi
- TLSH T19D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c
- Size 1024KB
- SHA256 f5d012f3866ce2cf7b6b4c29218a73195a139dc63d27cc72cb2cc65c297acc7c
- MD5 8a9f12e8b34028601d9944a644faef9a
- SHA1 4a82e32027cdccfcc652a8f21046e421f08c81aa
- SHA512 8afdcbdd32720b48d86789a0e965a5ba6f11112828708fe781b7f081dce790dd28c8e01597c40e13db7242da8903f0693811b3d1fc775c447fcc22c1f87a9315
- SSDEEP 24576:5jHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:5TGkQyhuTtS0rQi
- TLSH T19D25AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory