General
- Target aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc
- Size 2.4MB
- Sample260711-w7fdfshs2n
- SHA256 aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc
- MD5 263d21a1e06499d520ba5ce8ff2245b0
- SHA1 94ec5bb8960c0c410c43b9783e63c5b3430bc40a
- SHA512 3c4f00a0250c3d2f89e06927ebdd4ca451dbf15dc40fb6e271ef84d07d243f9d71bbe50ecfdd98e9a718e30137d5ce83ab63f684280dd84b94b09bb895f4e878
- SSDEEP 49152:/HHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:/nKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T174B58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc
- Size 2.4MB
- SHA256 aa3cd3fb13e78357911cb88b573731df9515cf43feece80eb5b963a0b2dd12dc
- MD5 263d21a1e06499d520ba5ce8ff2245b0
- SHA1 94ec5bb8960c0c410c43b9783e63c5b3430bc40a
- SHA512 3c4f00a0250c3d2f89e06927ebdd4ca451dbf15dc40fb6e271ef84d07d243f9d71bbe50ecfdd98e9a718e30137d5ce83ab63f684280dd84b94b09bb895f4e878
- SSDEEP 49152:/HHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:/nKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T174B58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory