General
- Target 97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480
- Size 832KB
- Sample260710-h396dagt5x
- SHA256 97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480
- MD5 e1e86364170efe981d7079323e13e64a
- SHA1 aeb776031d8863a654724aa1906e4c344031c030
- SHA512 ae4216a0bb42493f635194b996a374dc54c86c6be348b42eca24f89b354c842f6a8fa25d6a58e99c7187582431d5a906c30023f8a35925f2da6e9f5f591dc9e7
- SSDEEP 12288:CSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:JvO2xJKRI2FOkx2LFEAcUY
- TLSH T109056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480
- Size 832KB
- SHA256 97f966714d222626e25ccece30a4c3c1d9a62430762285bcfc6b01eaace29480
- MD5 e1e86364170efe981d7079323e13e64a
- SHA1 aeb776031d8863a654724aa1906e4c344031c030
- SHA512 ae4216a0bb42493f635194b996a374dc54c86c6be348b42eca24f89b354c842f6a8fa25d6a58e99c7187582431d5a906c30023f8a35925f2da6e9f5f591dc9e7
- SSDEEP 12288:CSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:JvO2xJKRI2FOkx2LFEAcUY
- TLSH T109056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory