General
- Target 0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11.dll
- Size 5.0MB
- Sample260625-ep1s1ahs2x
- SHA256 0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11
- MD5 d40f14f19c72f1d54250c94bed057906
- SHA1 e824f2c27a3be826f723b98f60161c753456d7db
- SHA512 c786884d2ed605adf68bb485553d5be32c2248fc630acf7437b3a95bd3cc4b6d44e433d8f97f167bc4e1a4b16d1197b57c3282fb21d97a4bf8434b8c7c3757ba
- SSDEEP 49152:RnaQqMSPbcBVQej/1INRx+TSqTdv1HkQo6SAA:1lqPoBhz1aRxcSUbk36SA
- TLSH T1DE36E115A1E86B64E7F36EB2217B871007797E45889B925E1760A04F0C33F5CDEE2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11.dll
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11.dll
Resource
win11ltsc2024-20260617-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11.dll
- Size 5.0MB
- SHA256 0b2d6d916b7c65a1ad734ae0798f48edc2c466165c82e60c8f30e82cf2d0cd11
- MD5 d40f14f19c72f1d54250c94bed057906
- SHA1 e824f2c27a3be826f723b98f60161c753456d7db
- SHA512 c786884d2ed605adf68bb485553d5be32c2248fc630acf7437b3a95bd3cc4b6d44e433d8f97f167bc4e1a4b16d1197b57c3282fb21d97a4bf8434b8c7c3757ba
- SSDEEP 49152:RnaQqMSPbcBVQej/1INRx+TSqTdv1HkQo6SAA:1lqPoBhz1aRxcSUbk36SA
- TLSH T1DE36E115A1E86B64E7F36EB2217B871007797E45889B925E1760A04F0C33F5CDEE2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (3366) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.