General
- Target d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3
- Size 395KB
- Sample260718-jexqtacv2p
- SHA256 d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3
- MD5 ab37eb622c354edf8189789ca4b25a47
- SHA1 5332d572065e0f97e78a0a9ab90776ae3cc0c1e2
- SHA512 b8acd1cb45a3cb8d751087a4be22e7caf35dbbc2764b055fa68dec81becd92a12c1d0eafff984974ffe39d9d12c946825d8dabe221a866d833e8d3b62f32bb2f
- SSDEEP 6144:BWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:BkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T166846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3
- Size 395KB
- SHA256 d12ea15d123f490658e9fcc1a241aca26e73697cea916eb3397b6c5a1cff3dc3
- MD5 ab37eb622c354edf8189789ca4b25a47
- SHA1 5332d572065e0f97e78a0a9ab90776ae3cc0c1e2
- SHA512 b8acd1cb45a3cb8d751087a4be22e7caf35dbbc2764b055fa68dec81becd92a12c1d0eafff984974ffe39d9d12c946825d8dabe221a866d833e8d3b62f32bb2f
- SSDEEP 6144:BWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:BkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T166846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory