General
- Target d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c
- Size 832KB
- Sample260710-x646vsfx3l
- SHA256 d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c
- MD5 0a70e193501149ba80ab584373b87e42
- SHA1 38a86ec570e304c1987d198bd54b1e4da2b5c4fc
- SHA512 98606098730f595089ec13273901bda20fadb3a90423d5f3d79cd61410347ebba049184cd8f7c77f1690293995b24a3a9aa79d9151f25d8875d2ce89bac8321d
- SSDEEP 12288:HSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:yvO2xJKRI2FOkx2LFEAcUY
- TLSH T114056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c
- Size 832KB
- SHA256 d8f9c6def005ccc08e834842b81d53844cfdb4bfc4508fb0364a0f802a67549c
- MD5 0a70e193501149ba80ab584373b87e42
- SHA1 38a86ec570e304c1987d198bd54b1e4da2b5c4fc
- SHA512 98606098730f595089ec13273901bda20fadb3a90423d5f3d79cd61410347ebba049184cd8f7c77f1690293995b24a3a9aa79d9151f25d8875d2ce89bac8321d
- SSDEEP 12288:HSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:yvO2xJKRI2FOkx2LFEAcUY
- TLSH T114056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory