General
- Target rmpsl
- Size 131KB
- Sample260718-pefp7aet51
- SHA256 1e3c77937fbeb6c30db92b5f571623264260e71ddfae8b5c2f79a76c20057e23
- MD5 3ab16a5b3f205f6aa2bc47f84cfb7cc3
- SHA1 73c5bfe39f7de12efc981445b49d742056204356
- SHA512 4c145512d1497b14911d996a57155814fd3e125bd358032b7aa68baf28053511538ae0d04b0a855d012b26ec7560361054f620a572d9b746e97d28d931cec504
- SSDEEP 3072:RiwULpMwOu8knavsiMqEYNh9azHZcn5fp:8zMwJnavsiMqTh9aUf
- TLSH T10AD30906BF601EF7E8ABCD3741B94B0A24CC645B22A83B753674D528B64B50F4AD3D74
- MD5 SHA1 SHA512 SSDEEP TLSH
Static task
static1
Malware Config
Targets
-
- Target rmpsl
- Size 131KB
- SHA256 1e3c77937fbeb6c30db92b5f571623264260e71ddfae8b5c2f79a76c20057e23
- MD5 3ab16a5b3f205f6aa2bc47f84cfb7cc3
- SHA1 73c5bfe39f7de12efc981445b49d742056204356
- SHA512 4c145512d1497b14911d996a57155814fd3e125bd358032b7aa68baf28053511538ae0d04b0a855d012b26ec7560361054f620a572d9b746e97d28d931cec504
- SSDEEP 3072:RiwULpMwOu8knavsiMqEYNh9azHZcn5fp:8zMwJnavsiMqTh9aUf
- TLSH T10AD30906BF601EF7E8ABCD3741B94B0A24CC645B22A83B753674D528B64B50F4AD3D74
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Contacts a large (29810) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.