General
- Target 1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04
- Size 1.2MB
- Sample260702-1ndsqsct3p
- SHA256 1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04
- MD5 481012dd3db7e5dc8695f385260e2de1
- SHA1 de10671da3207c68bca405180dbdb70c0536870c
- SHA512 b7ab3453e323007b068ca660444c47e72a6e3c8c8969ef3351fe69340c30776f8a47fc84c9560f6d9c2cb16c12c1c2c9d076acf7f31e0ed5d9cf4ed65efd9078
- SSDEEP 24576:hvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+y:hHHKX2WQt5QZuTtS0rQi
- TLSH T1F8558D31E641C036D5A70175C6BA4BBFA5787D21032565CBE3D43E6A2FB22D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04.exe
Resource
win11ltsc2024-20260629-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04
- Size 1.2MB
- SHA256 1930d23d3fb3cc74b455a6837262e3897d14c3ce24887c589e0120ecfa592f04
- MD5 481012dd3db7e5dc8695f385260e2de1
- SHA1 de10671da3207c68bca405180dbdb70c0536870c
- SHA512 b7ab3453e323007b068ca660444c47e72a6e3c8c8969ef3351fe69340c30776f8a47fc84c9560f6d9c2cb16c12c1c2c9d076acf7f31e0ed5d9cf4ed65efd9078
- SSDEEP 24576:hvO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+y:hHHKX2WQt5QZuTtS0rQi
- TLSH T1F8558D31E641C036D5A70175C6BA4BBFA5787D21032565CBE3D43E6A2FB22D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory