General
- Target 21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32
- Size 832KB
- Sample260718-ygvrkabs2m
- SHA256 21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32
- MD5 0465344ed95dba9900f0dc7befa2557a
- SHA1 ba609e47606ed700bc5aa693048a26ff9bbdfb3f
- SHA512 1f6305ec977e4b1602939b73167a8499d3cadb21f9767e781f91079e023fd390ed96873ef71eeb416f13d87345880ca82354d4ede32ee1fae2a9ef6c923bf2f4
- SSDEEP 12288:NSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:MvO2xJKRI2FOkx2LFEAcUY
- TLSH T113056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32
- Size 832KB
- SHA256 21c161d75bde2b4dd901405a3046f77f84b9051f03ea94bce8afa78360e9ae32
- MD5 0465344ed95dba9900f0dc7befa2557a
- SHA1 ba609e47606ed700bc5aa693048a26ff9bbdfb3f
- SHA512 1f6305ec977e4b1602939b73167a8499d3cadb21f9767e781f91079e023fd390ed96873ef71eeb416f13d87345880ca82354d4ede32ee1fae2a9ef6c923bf2f4
- SSDEEP 12288:NSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:MvO2xJKRI2FOkx2LFEAcUY
- TLSH T113056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory