General
- Target 4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92
- Size 832KB
- Sample260528-ty1xpaf12x
- SHA256 4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92
- MD5 a89f004cc0cac81fade943a8ca6b555d
- SHA1 9994ea2d1b55d15f9ff7724cc66a5e3669a6adb9
- SHA512 2021dd9ed89051e081cb0d21e1168c016e5bb6a0517d15d6952a33bb39ce235be1e12603bb7e328e589a2a9812dce8dfecc53d95ac79086fe31e36ec2919c1d1
- SSDEEP 12288:XSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ivO2xJKRI2FOkx2LFEAcUY
- TLSH T12A056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92
- Size 832KB
- SHA256 4b5b420276033fb9d5b60f8fb0ed957d7f5b8bedcb429f43346b28db7a39bb92
- MD5 a89f004cc0cac81fade943a8ca6b555d
- SHA1 9994ea2d1b55d15f9ff7724cc66a5e3669a6adb9
- SHA512 2021dd9ed89051e081cb0d21e1168c016e5bb6a0517d15d6952a33bb39ce235be1e12603bb7e328e589a2a9812dce8dfecc53d95ac79086fe31e36ec2919c1d1
- SSDEEP 12288:XSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ivO2xJKRI2FOkx2LFEAcUY
- TLSH T12A056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory