General
- Target ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76
- Size 395KB
- Sample260511-zedkyaas3w
- SHA256 ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76
- MD5 da80ec363a2a3b39a225f8b52ae78c6a
- SHA1 8d29508aaf45a5d3d56ecc826b62356628795d8d
- SHA512 ca8242da371c29a29781e5465fd26db3367f0c173c299132360ed05eb894dcd764a693838107b18be1dc9a8730e4a6847e76838c411134a90da32a4f3afee70b
- SSDEEP 6144:nQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:n39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1AF847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76
- Size 395KB
- SHA256 ebca5d96e14aa47c42e30418dbd69c20aae2da3bb5d7e60cf53ab28c24d3fe76
- MD5 da80ec363a2a3b39a225f8b52ae78c6a
- SHA1 8d29508aaf45a5d3d56ecc826b62356628795d8d
- SHA512 ca8242da371c29a29781e5465fd26db3367f0c173c299132360ed05eb894dcd764a693838107b18be1dc9a8730e4a6847e76838c411134a90da32a4f3afee70b
- SSDEEP 6144:nQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:n39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1AF847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory