General
- Target ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e
- Size 2.1MB
- Sample260601-lll9rsgv21
- SHA256 ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e
- MD5 912157b98ade1773db0daf4846f28e8b
- SHA1 4ee4e13879deee0bda72f8536004db26ca8adc38
- SHA512 179d31eda61791edb9f1364093a9a79fb8d269d2bb4c3f75b067975ad0e338dacfebda9ec1a839c7eabd2547ad0cad26c9cce7c36ba47844a82a971947ab2ba7
- SSDEEP 49152:CHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQdh:CnKl2qOb2lP8ssYoJxKkyh
- TLSH T189A5BF12F7A1C072C4A7427189BB876EF674BD1157218ACBA3C03A5A5EB33D27E35309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e.exe
Resource
win11-20260513-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e
- Size 2.1MB
- SHA256 ef42cc06c7a4edd81c1459b0db890eccdadc4de8f836b59710c95df50659c54e
- MD5 912157b98ade1773db0daf4846f28e8b
- SHA1 4ee4e13879deee0bda72f8536004db26ca8adc38
- SHA512 179d31eda61791edb9f1364093a9a79fb8d269d2bb4c3f75b067975ad0e338dacfebda9ec1a839c7eabd2547ad0cad26c9cce7c36ba47844a82a971947ab2ba7
- SSDEEP 49152:CHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQdh:CnKl2qOb2lP8ssYoJxKkyh
- TLSH T189A5BF12F7A1C072C4A7427189BB876EF674BD1157218ACBA3C03A5A5EB33D27E35309
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory