General
- Target 9b211170d90cc29df8fdcc2171a4c6b45fb307d5b9de4d4c4a65da559f836937
- Size 560KB
- Sample260717-xpqbdabv5r
- SHA256 9b211170d90cc29df8fdcc2171a4c6b45fb307d5b9de4d4c4a65da559f836937
- MD5 7536f876d99b1a9e1585e9c798d21ae1
- SHA1 62f6e32af494600152cc831a5dc12f0bec2cd3bd
- SHA512 7afb5410dfc41e3cbb5c5e5b53634a446b750d18766ccd8d29cd2675b411a0b19abdac3565d4e5bd306f3a8a8339a3ef0d5b8e9e1de8d958b91c3ded10cd6515
- SSDEEP 6144:gUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:gYsVOdhElvkCgvDLe4usOkxHy
- TLSH T169C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
9b211170d90cc29df8fdcc2171a4c6b45fb307d5b9de4d4c4a65da559f836937.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 9b211170d90cc29df8fdcc2171a4c6b45fb307d5b9de4d4c4a65da559f836937
- Size 560KB
- SHA256 9b211170d90cc29df8fdcc2171a4c6b45fb307d5b9de4d4c4a65da559f836937
- MD5 7536f876d99b1a9e1585e9c798d21ae1
- SHA1 62f6e32af494600152cc831a5dc12f0bec2cd3bd
- SHA512 7afb5410dfc41e3cbb5c5e5b53634a446b750d18766ccd8d29cd2675b411a0b19abdac3565d4e5bd306f3a8a8339a3ef0d5b8e9e1de8d958b91c3ded10cd6515
- SSDEEP 6144:gUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:gYsVOdhElvkCgvDLe4usOkxHy
- TLSH T169C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory