General
- Target 445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c
- Size 395KB
- Sample260709-3cmbvaax4j
- SHA256 445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c
- MD5 8b386c3b56dc06298b080b976d770d5e
- SHA1 b6af9fca4858944631cea0411c51e3129a581362
- SHA512 1e57650728ff639f67f47c49d449af366d67f569b8a0848c3a4a80bf6efe8b9e8c929a6520fb96b41e69cdbb8e99dc83eea295d86af07915b0b6131109e1db44
- SSDEEP 6144:YcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:YCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1B4846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c
- Size 395KB
- SHA256 445aaae25981c4b322e420e70a9ee3da39319863adec5c4f61bcfef6936c581c
- MD5 8b386c3b56dc06298b080b976d770d5e
- SHA1 b6af9fca4858944631cea0411c51e3129a581362
- SHA512 1e57650728ff639f67f47c49d449af366d67f569b8a0848c3a4a80bf6efe8b9e8c929a6520fb96b41e69cdbb8e99dc83eea295d86af07915b0b6131109e1db44
- SSDEEP 6144:YcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:YCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1B4846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory