General
- Target e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096
- Size 395KB
- Sample260718-zklthact6k
- SHA256 e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096
- MD5 17deb82a6f1f42069d8892354a114b1c
- SHA1 38c4517b8dc6fafc373d59548249dca396bfc241
- SHA512 cc7b9ee881e8319e174d3d2b453d915d8e9ad6ad9d894b3a44245d0618e6c666538f149995376a50495124982d9b8c51edd53d2a69d4fc26e91faff1f68b9bb6
- SSDEEP 6144:BQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:B39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T197847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096
- Size 395KB
- SHA256 e2853eadaab53c304fe8d6e85869ed52e872f23306a345ed12012bb3fa688096
- MD5 17deb82a6f1f42069d8892354a114b1c
- SHA1 38c4517b8dc6fafc373d59548249dca396bfc241
- SHA512 cc7b9ee881e8319e174d3d2b453d915d8e9ad6ad9d894b3a44245d0618e6c666538f149995376a50495124982d9b8c51edd53d2a69d4fc26e91faff1f68b9bb6
- SSDEEP 6144:BQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:B39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T197847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory