General
- Target 36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d
- Size 1.6MB
- Sample260529-c2sxtabt7w
- SHA256 36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d
- MD5 653171a2a05d2bbbe5eb707df7ea98e6
- SHA1 a12e3617a6b6fa2076d1f16c6c53fefa0b74149f
- SHA512 1896f0642e1615d57efb86f615b2bf507255ce14372e503b58e49cb626de431a80967bb2442cc39f607046506cb55cd9b41c0b820d7b93def344f3858f0017be
- SSDEEP 24576:FvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:FHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T1CA759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d
- Size 1.6MB
- SHA256 36e9e34de34b3b7e152f416f978b9edcac3ab9c66e31a0dde1c0024a7ea6a90d
- MD5 653171a2a05d2bbbe5eb707df7ea98e6
- SHA1 a12e3617a6b6fa2076d1f16c6c53fefa0b74149f
- SHA512 1896f0642e1615d57efb86f615b2bf507255ce14372e503b58e49cb626de431a80967bb2442cc39f607046506cb55cd9b41c0b820d7b93def344f3858f0017be
- SSDEEP 24576:FvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:FHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T1CA759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory