General
- Target f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286
- Size 3.3MB
- Sample260709-2gm89sat7l
- SHA256 f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286
- MD5 3799f03046cc0d1a70976ef44ee81e79
- SHA1 1083bef6fe17c2a0309305586340ee386c3e1339
- SHA512 48d724ec38e30e1102d51ebb1985f7cd128879840a8b5a052afff60cbbd3a54f25506e002f80e64f75b425e3dc914612c303275aef91771e1ae35cd677d64f95
- SSDEEP 24576:WvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:WHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T17BF54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286
- Size 3.3MB
- SHA256 f8df1ebc297d36e4da36487449a107ef109e17a1a21afa86c79771c8f8e47286
- MD5 3799f03046cc0d1a70976ef44ee81e79
- SHA1 1083bef6fe17c2a0309305586340ee386c3e1339
- SHA512 48d724ec38e30e1102d51ebb1985f7cd128879840a8b5a052afff60cbbd3a54f25506e002f80e64f75b425e3dc914612c303275aef91771e1ae35cd677d64f95
- SSDEEP 24576:WvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:WHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T17BF54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory