General
- Target 841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58
- Size 3.0MB
- Sample260529-epaa2scx41
- SHA256 841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58
- MD5 8928e99ebd844d76b5755caedf2f2823
- SHA1 a87922d7cdf5021976d02688e4ee2228b4419eec
- SHA512 f88393d4b65435a34be1e84a8ff2f3a49ec995b3faf0e3ed05add85ac0dee38235aaf79c95b5e52b296a6ab77b86b97e89a3a78bc2914287b774bcf2047e7b4d
- SSDEEP 49152:5A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:O/whnLrHp/qKm2/Sb/
- TLSH T19BE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58.exe
Resource
win11-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58
- Size 3.0MB
- SHA256 841a7fe46b2891448c2bc6a30921a7a55ae6ccd6a2818ce8c160cd5424013c58
- MD5 8928e99ebd844d76b5755caedf2f2823
- SHA1 a87922d7cdf5021976d02688e4ee2228b4419eec
- SHA512 f88393d4b65435a34be1e84a8ff2f3a49ec995b3faf0e3ed05add85ac0dee38235aaf79c95b5e52b296a6ab77b86b97e89a3a78bc2914287b774bcf2047e7b4d
- SSDEEP 49152:5A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/:O/whnLrHp/qKm2/Sb/
- TLSH T19BE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory