General
- Target 3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d
- Size 2.1MB
- Sample260527-sm8bysbv5x
- SHA256 3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d
- MD5 f5713a7db81bd208f579815695e62342
- SHA1 a2e5fce8be577c906c86fca1adf576b8059dfbc0
- SHA512 743d4dfd0d1abc556171a809c077a3fd3f349b25057aa06ff563100d689713f0dbe5284679fd2832021822c711edbb9ff1b5c3cbb2ec372055842a3d7e917eef
- SSDEEP 49152:dHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQdh:dnKl2qOb2lP8ssYoJxKkyh
- TLSH T12BA5BF12F7A1C072C4A7427189BB876EF674BD1157218ACBA3C03A5A5EB33D27E35309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d
- Size 2.1MB
- SHA256 3936928e61ea89c28197378a827557adde45d39342f5678b9414a3abf368ee3d
- MD5 f5713a7db81bd208f579815695e62342
- SHA1 a2e5fce8be577c906c86fca1adf576b8059dfbc0
- SHA512 743d4dfd0d1abc556171a809c077a3fd3f349b25057aa06ff563100d689713f0dbe5284679fd2832021822c711edbb9ff1b5c3cbb2ec372055842a3d7e917eef
- SSDEEP 49152:dHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQdh:dnKl2qOb2lP8ssYoJxKkyh
- TLSH T12BA5BF12F7A1C072C4A7427189BB876EF674BD1157218ACBA3C03A5A5EB33D27E35309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory