General
- Target d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7
- Size 3.0MB
- Sample260711-xassysa191
- SHA256 d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7
- MD5 6a5bf9f095297c2a401cff3350ac6b5a
- SHA1 2e30fdffc792d5ae6fed48e6876e98c8d4183689
- SHA512 e0454e7d72ff860321acd4c565a10c90397caeda28e4d40f0fe0df9950fc727924b5e67dbd527cf1dd386ea454d5288ecb22b4bec521f87f75ed6932b5f23be5
- SSDEEP 49152:DHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:DnKdBWsM0r1Qn1K4XKH40Feu
- TLSH T1A7E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7
- Size 3.0MB
- SHA256 d1a59b8b5641374322855396b9f0aa2aed3e0e2cf1f26e61ac07007850837ea7
- MD5 6a5bf9f095297c2a401cff3350ac6b5a
- SHA1 2e30fdffc792d5ae6fed48e6876e98c8d4183689
- SHA512 e0454e7d72ff860321acd4c565a10c90397caeda28e4d40f0fe0df9950fc727924b5e67dbd527cf1dd386ea454d5288ecb22b4bec521f87f75ed6932b5f23be5
- SSDEEP 49152:DHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:DnKdBWsM0r1Qn1K4XKH40Feu
- TLSH T1A7E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory