General
- Target 12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93
- Size 896KB
- Sample260708-kh8g6aev7p
- SHA256 12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93
- MD5 531f96ef1994d6039711fe291ab0026d
- SHA1 dfff6b73dd30e2d1042ead669fde2f491530da27
- SHA512 9478f326958255dbc7c31d78b50b562b98a37fe2b2c03c985f532d22224db89637a95c59e36065fe78d5e60e81c5a7e054efb877147420857f4bdfa6401068f4
- SSDEEP 12288:ESvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:3vO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1B6157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93.exe
Resource
win11ltsc2024-20260706-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93
- Size 896KB
- SHA256 12c5091e0a1a085ab3bb18ef5164083785af21a4d2220020ce163f7514190b93
- MD5 531f96ef1994d6039711fe291ab0026d
- SHA1 dfff6b73dd30e2d1042ead669fde2f491530da27
- SHA512 9478f326958255dbc7c31d78b50b562b98a37fe2b2c03c985f532d22224db89637a95c59e36065fe78d5e60e81c5a7e054efb877147420857f4bdfa6401068f4
- SSDEEP 12288:ESvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:3vO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1B6157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory