General
- Target e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1
- Size 792KB
- Sample260711-wffvxaf18r
- SHA256 e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1
- MD5 9f4b0baef6cf8cbc6c91cd417f98a27e
- SHA1 39d47c5e4d192c0e0d05d18a3ba6716c43d919fb
- SHA512 1a46eedaa63fb411556480e0d86c54c3b7e6fb99589c55d049e5e633f62e1d4d74f87683cad4759e4b4739a6dc45a41d82d1a10c0a808de141b9cd1121b1dbe8
- SSDEEP 12288:HHLN5dUUNaacy8n1FNtbT/kffgUs/k+2R70rWjHIg3Af:hTUDacyS1FNtbT/og5k+c06jHEf
- TLSH T181057D19FA6811EAD07AC57CC5878907FB727C450760ABDF07A08A666F1B7E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1.dll
Resource
win10v2004-20260513-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1.dll
Resource
win11ltsc2024-20260709-en
4 signatures
150 seconds
Malware Config
Targets
-
- Target e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1
- Size 792KB
- SHA256 e04fbaea85efff12480777b881c68fe0b8ab3eeb98b5a10658a78ee515e1e4c1
- MD5 9f4b0baef6cf8cbc6c91cd417f98a27e
- SHA1 39d47c5e4d192c0e0d05d18a3ba6716c43d919fb
- SHA512 1a46eedaa63fb411556480e0d86c54c3b7e6fb99589c55d049e5e633f62e1d4d74f87683cad4759e4b4739a6dc45a41d82d1a10c0a808de141b9cd1121b1dbe8
- SSDEEP 12288:HHLN5dUUNaacy8n1FNtbT/kffgUs/k+2R70rWjHIg3Af:hTUDacyS1FNtbT/og5k+c06jHEf
- TLSH T181057D19FA6811EAD07AC57CC5878907FB727C450760ABDF07A08A666F1B7E09E3E311
- MD5 SHA1 SHA512 SSDEEP TLSH
Score8/10-
Badlisted process makes network request
Network request originating from process or tool commonly abused by malware.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.