General
- Target d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd
- Size 1.4MB
- Sample260718-ynnltsbt8p
- SHA256 d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd
- MD5 c9e0aca1b5aad3b6ed207c6e8d06ec48
- SHA1 2a083ff505cf7b67fcb414333b15d7c3a6104d89
- SHA512 dec282b09cf8e1e541359a9a68df170a0f865b85fd93ce3d3c4e9f39582784c3ca69d6db13b32ccbcc6a6745538c3b9f03e8333f135658a0e90bb14afbabdb41
- SSDEEP 24576:2jHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:2TGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T175658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd
- Size 1.4MB
- SHA256 d54e4b838cb92e5a1c97d6f2fa692339906af30d35b7d01dca160e3c695c49fd
- MD5 c9e0aca1b5aad3b6ed207c6e8d06ec48
- SHA1 2a083ff505cf7b67fcb414333b15d7c3a6104d89
- SHA512 dec282b09cf8e1e541359a9a68df170a0f865b85fd93ce3d3c4e9f39582784c3ca69d6db13b32ccbcc6a6745538c3b9f03e8333f135658a0e90bb14afbabdb41
- SSDEEP 24576:2jHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:2TGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T175658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory