General
- Target 8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a
- Size 832KB
- Sample260718-yqmsbabv7j
- SHA256 8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a
- MD5 97c0602170f894fdc083e0c460dee2d8
- SHA1 304e70855a74ae4ec6c544259f03f2361238c601
- SHA512 cc047284969ce660bb105f9f8c837a788b1b45e1c6d5c02a12df4bd777c9dd0ccd9d4499f658bfa1ff677ab1c70bb864392fda4b80915ecafe9b947775fd2a02
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ZvO2xJKRI2FOkx2LFEAcUY
- TLSH T1AE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a
- Size 832KB
- SHA256 8c1a14538d622e047e9df541ccdd352f621b5dc0a2271a9e74b17eb9b8df3d3a
- MD5 97c0602170f894fdc083e0c460dee2d8
- SHA1 304e70855a74ae4ec6c544259f03f2361238c601
- SHA512 cc047284969ce660bb105f9f8c837a788b1b45e1c6d5c02a12df4bd777c9dd0ccd9d4499f658bfa1ff677ab1c70bb864392fda4b80915ecafe9b947775fd2a02
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ZvO2xJKRI2FOkx2LFEAcUY
- TLSH T1AE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory