General
- Target 021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026
- Size 419KB
- Sample260701-ydlpgsfv41
- SHA256 021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026
- MD5 92d45314e63e6fd0a86132f487ff1c28
- SHA1 057458203fc4fc48a2dbf049cf1952d05c9e5c33
- SHA512 13e53c0acab81fe9099ee6c75419fb4b746ac77d692186821b08ef8f97b3f1eb018bce47d4844f8c328462e67bc8a83b1ceaa931d83edc851f7f638166204722
- SSDEEP 6144:M8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ba+4EZe/uwqDvDOkx2LIa
- TLSH T147948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026.exe
Resource
win11ltsc2024-20260629-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026
- Size 419KB
- SHA256 021ea4683c1d9a8af04d7ac84109b62c649b97b2884aa4a6a1eb0872861ae026
- MD5 92d45314e63e6fd0a86132f487ff1c28
- SHA1 057458203fc4fc48a2dbf049cf1952d05c9e5c33
- SHA512 13e53c0acab81fe9099ee6c75419fb4b746ac77d692186821b08ef8f97b3f1eb018bce47d4844f8c328462e67bc8a83b1ceaa931d83edc851f7f638166204722
- SSDEEP 6144:M8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ba+4EZe/uwqDvDOkx2LIa
- TLSH T147948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory