General
- Target 385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f
- Size 948KB
- Sample260527-ndabcaev8v
- SHA256 385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f
- MD5 c5472f794cbbb15bb16e144bc9e8f12f
- SHA1 dd95b375621f547aea7eef2ff7146903b856ec0e
- SHA512 c0f6e9c40375e3977595cd6605c0f24d9d3ad10ace31fb64d13287c3893d10a3f99927a0978dfec61be4b3c9322966a7e1384e57d1a4d12f16a86d79df604461
- SSDEEP 24576:LvO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJ:LHHKO2FQd1oOU82lPJ
- TLSH T1F3259D16F7A1C072C86742B448B6872EA671BC152B214ACBF7C07B5E4E727D1AE3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f
- Size 948KB
- SHA256 385806bfa7d28f2e033b4a417ceec73779d6f824e167714667684b80c6ae881f
- MD5 c5472f794cbbb15bb16e144bc9e8f12f
- SHA1 dd95b375621f547aea7eef2ff7146903b856ec0e
- SHA512 c0f6e9c40375e3977595cd6605c0f24d9d3ad10ace31fb64d13287c3893d10a3f99927a0978dfec61be4b3c9322966a7e1384e57d1a4d12f16a86d79df604461
- SSDEEP 24576:LvO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJ:LHHKO2FQd1oOU82lPJ
- TLSH T1F3259D16F7A1C072C86742B448B6872EA671BC152B214ACBF7C07B5E4E727D1AE3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory