General
- Target 849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741
- Size 3.3MB
- Sample260712-w6klsafv2n
- SHA256 849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741
- MD5 157da9e3d6558038e1b54cf84b97d1b5
- SHA1 46c3ee7d8f04cf6df7bcc5c887943d8169aa2a2c
- SHA512 7aec88a8fb61592fb4f26ef101763a6f8b81ae35c0d2f95b6fa2196cbc15d275f535c65600157cab0c0a6a3d7f90bed434b94b409d1fcad4a08b9eb848bc090b
- SSDEEP 24576:OvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:OHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T11CF54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741
- Size 3.3MB
- SHA256 849b93720caf862b80f0b4a3e7b8ea38be96571c27cf4386b2dbd679a115e741
- MD5 157da9e3d6558038e1b54cf84b97d1b5
- SHA1 46c3ee7d8f04cf6df7bcc5c887943d8169aa2a2c
- SHA512 7aec88a8fb61592fb4f26ef101763a6f8b81ae35c0d2f95b6fa2196cbc15d275f535c65600157cab0c0a6a3d7f90bed434b94b409d1fcad4a08b9eb848bc090b
- SSDEEP 24576:OvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:OHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T11CF54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory