General
- Target ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941
- Size 615KB
- Sample260717-ytvmbscy3m
- SHA256 ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941
- MD5 ecce275ae930cd7bb154b95e64ed1a97
- SHA1 6a6774030ae9bf718618fc3d4b3aaf3d45c9f4a9
- SHA512 d66ae0275e7ff21df852e1341fd21b03a97064955839e692c0f7c2f95eb20291c13ce1fd0582de981faf8bd987c88f0d02719cebf66fd190d2ccb4b4b89c4780
- SSDEEP 12288:uSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:NvO2xJKRI2FOkx2LFicUV
- TLSH T1E7D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941
- Size 615KB
- SHA256 ef42fd193c4190ffd215bf437c8da4a654dfbcf2c485ecd6ccbca95f35203941
- MD5 ecce275ae930cd7bb154b95e64ed1a97
- SHA1 6a6774030ae9bf718618fc3d4b3aaf3d45c9f4a9
- SHA512 d66ae0275e7ff21df852e1341fd21b03a97064955839e692c0f7c2f95eb20291c13ce1fd0582de981faf8bd987c88f0d02719cebf66fd190d2ccb4b4b89c4780
- SSDEEP 12288:uSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:NvO2xJKRI2FOkx2LFicUV
- TLSH T1E7D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory