General
- Target eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3
- Size 2.0MB
- Sample260511-ycbg5ahs41
- SHA256 eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3
- MD5 0e8d32217449dedbe60563836803c2bd
- SHA1 5512472d874c80dc701d974bee0ddb0327039bb9
- SHA512 43c45929205a570111028f2c0d599c84c305b2b9b29d791f30d36151c150db7cc38fa492274e6764b735cd461e9491f18c290d79012e56068373148346ee130b
- SSDEEP 49152:jHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:jnKdVkOhCXHHFZMjHfUKkVi
- TLSH T1EDA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3
- Size 2.0MB
- SHA256 eb6309f3b9e301330e21149442bb983bf4e5cf6f52708b0b154532201648d5a3
- MD5 0e8d32217449dedbe60563836803c2bd
- SHA1 5512472d874c80dc701d974bee0ddb0327039bb9
- SHA512 43c45929205a570111028f2c0d599c84c305b2b9b29d791f30d36151c150db7cc38fa492274e6764b735cd461e9491f18c290d79012e56068373148346ee130b
- SSDEEP 49152:jHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:jnKdVkOhCXHHFZMjHfUKkVi
- TLSH T1EDA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory