General
- Target 208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1
- Size 576KB
- Sample260712-xabvfafw2j
- SHA256 208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1
- MD5 ed5ccadaa2905d27c3cc5ba32bdb42e4
- SHA1 fa4d8024d68ce249cfac1e309a6faa5682f6d610
- SHA512 4940826c10473e7d8f7082c8ae78b100de2e92d4ec119bac81cf7eb32862908168faef8e757bdfc25324ccc522eee50a94601e50fd621643ce86fba5e6a91223
- SSDEEP 12288:AqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:AjHPOSOkx2LFscUQPK
- TLSH T1D9C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1
- Size 576KB
- SHA256 208c134215ffb5af83daf6635cdda89eb7c12e768ebe8ac142775c4f5c119ee1
- MD5 ed5ccadaa2905d27c3cc5ba32bdb42e4
- SHA1 fa4d8024d68ce249cfac1e309a6faa5682f6d610
- SHA512 4940826c10473e7d8f7082c8ae78b100de2e92d4ec119bac81cf7eb32862908168faef8e757bdfc25324ccc522eee50a94601e50fd621643ce86fba5e6a91223
- SSDEEP 12288:AqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:AjHPOSOkx2LFscUQPK
- TLSH T1D9C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory