General
- Target 474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060
- Size 640KB
- Sample260527-rn3meshx7w
- SHA256 474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060
- MD5 20849867896b01b4f08e882c2ae01ec0
- SHA1 769bcb479e018d300f6142cefa8e02bd06211756
- SHA512 8ebf6fcede0320ca1fe8a67fa05a3c3591b1448af3fac0dc8619ca7b13564f2ce1b831330c0266b936689b923b4479af42cb77ae695044add5a0ce6a6f693684
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:wSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E6D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060
- Size 640KB
- SHA256 474421d4ad038682217a2b93c4660807b3cb62b9945afa0ad7d83d0ba1cc3060
- MD5 20849867896b01b4f08e882c2ae01ec0
- SHA1 769bcb479e018d300f6142cefa8e02bd06211756
- SHA512 8ebf6fcede0320ca1fe8a67fa05a3c3591b1448af3fac0dc8619ca7b13564f2ce1b831330c0266b936689b923b4479af42cb77ae695044add5a0ce6a6f693684
- SSDEEP 6144:wcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:wSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1E6D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory