General
- Target 85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a
- Size 1.9MB
- Sample260511-yn95tsc15q
- SHA256 85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a
- MD5 4423bb42bc38dea5c1cf93eb541f066f
- SHA1 5524fd23e61dbc0b18a09ed7bfd809071e1f9730
- SHA512 92b761e258255f66c34ead9f277158b714def0c069e1191c46baa4bc0e0a275797d738888f8b9f9225bb02b382d1c81fc6ffde6cf4b8c278ae9b447ae429859a
- SSDEEP 49152:7HHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGh:7nKl2qOb2lP8ssYoJxKh
- TLSH T1EB95CF12F7B1C0B2C4A742748866C32EE671BD115B218EDBA7C03B5A5E727D17E3A349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a
- Size 1.9MB
- SHA256 85f7749e75aeedcfbaa99b2f0ee988a5b6f2eea820d64138e080b82b57ed5c6a
- MD5 4423bb42bc38dea5c1cf93eb541f066f
- SHA1 5524fd23e61dbc0b18a09ed7bfd809071e1f9730
- SHA512 92b761e258255f66c34ead9f277158b714def0c069e1191c46baa4bc0e0a275797d738888f8b9f9225bb02b382d1c81fc6ffde6cf4b8c278ae9b447ae429859a
- SSDEEP 49152:7HHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGh:7nKl2qOb2lP8ssYoJxKh
- TLSH T1EB95CF12F7B1C0B2C4A742748866C32EE671BD115B218EDBA7C03B5A5E727D17E3A349
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory