General
- Target 0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366
- Size 576KB
- Sample260717-x2ncjsbz9k
- SHA256 0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366
- MD5 480c7eea6e6c38265d14994d206627b9
- SHA1 8ed704207d750854c051e24f2785f57c5a14297d
- SHA512 4341a3a3140df846be75bb860b5f469ec3c5ec93d704b72015f3c426f248056509ed3f1e9f70c4bc48638d116eda1804caff1b2d2f7ab2a70cb1453af8c2389c
- SSDEEP 12288:CqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:CjHPOSOkx2LFscUQPK
- TLSH T132C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366
- Size 576KB
- SHA256 0599de034a5bc56073ea5197fd4af590e368f2e36a6b7c9ba2747e8adeee6366
- MD5 480c7eea6e6c38265d14994d206627b9
- SHA1 8ed704207d750854c051e24f2785f57c5a14297d
- SHA512 4341a3a3140df846be75bb860b5f469ec3c5ec93d704b72015f3c426f248056509ed3f1e9f70c4bc48638d116eda1804caff1b2d2f7ab2a70cb1453af8c2389c
- SSDEEP 12288:CqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:CjHPOSOkx2LFscUQPK
- TLSH T132C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory