General
- Target 70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769
- Size 560KB
- Sample260712-ygl5esh17w
- SHA256 70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769
- MD5 6129e68c56f19d245b4fec5a6022ef13
- SHA1 41e8da5aafcd78b6a83fadcd12b4549295bda545
- SHA512 d0b999481b233af57df809b6635360a970ace7ca2ea50723f7803ed8a09ff6fd986ecf3b42c18956b51e6c112cd7a49220cbabfcf67be6d092036e0136e5aaf6
- SSDEEP 6144:ZUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:ZYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1FEC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769
- Size 560KB
- SHA256 70cc2c45cb2e735153cc5860331490e5f0feec415d48efaae7355f19569cb769
- MD5 6129e68c56f19d245b4fec5a6022ef13
- SHA1 41e8da5aafcd78b6a83fadcd12b4549295bda545
- SHA512 d0b999481b233af57df809b6635360a970ace7ca2ea50723f7803ed8a09ff6fd986ecf3b42c18956b51e6c112cd7a49220cbabfcf67be6d092036e0136e5aaf6
- SSDEEP 6144:ZUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:ZYsVOdhElvkCgvDLe4usOkxHy
- TLSH T1FEC48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory