General
- Target 81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1
- Size 511KB
- Sample260710-zff3fsbv6w
- SHA256 81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1
- MD5 6fa4cb5bae58f7c66477c80c225d5b4e
- SHA1 b9d556251ef104a49099fa11c458f6a6fa42300e
- SHA512 63d370f1781c0c011374aa3884ab12c75847206d6a6ac0aee76f25c452136282e92dde376001aa045a250025ecde7c51b33605e3bb90b39f108e72274fedeea5
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1FDB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1
- Size 511KB
- SHA256 81e1f417b2b83fac632eeae84b50013cd612b614e70ab0a2c47666e953439fc1
- MD5 6fa4cb5bae58f7c66477c80c225d5b4e
- SHA1 b9d556251ef104a49099fa11c458f6a6fa42300e
- SHA512 63d370f1781c0c011374aa3884ab12c75847206d6a6ac0aee76f25c452136282e92dde376001aa045a250025ecde7c51b33605e3bb90b39f108e72274fedeea5
- SSDEEP 6144:dcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:dSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1FDB45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory