General
- Target f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59
- Size 2.6MB
- Sample260716-ywapyacy6j
- SHA256 f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59
- MD5 774e38d9583741dc2bcf9ba40e47ca99
- SHA1 4babd4dafe0695f362db641f431639ca2964c480
- SHA512 aea140a73c170cd82d46c2ea82d42a21882e961e1f30d4648ad39bd5c9c9149ed6a3d139c5a6cd6808558b5e81a738f9e76410970177d1479e69834477de3f51
- SSDEEP 49152:LTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:LKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T138C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59
- Size 2.6MB
- SHA256 f35255d151b1cbb83193ebc6b65d947e919f142e5536e99a0c22dd5e819afd59
- MD5 774e38d9583741dc2bcf9ba40e47ca99
- SHA1 4babd4dafe0695f362db641f431639ca2964c480
- SHA512 aea140a73c170cd82d46c2ea82d42a21882e961e1f30d4648ad39bd5c9c9149ed6a3d139c5a6cd6808558b5e81a738f9e76410970177d1479e69834477de3f51
- SSDEEP 49152:LTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:LKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T138C59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory