General
- Target f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788
- Size 560KB
- Sample260719-echfwsdy91
- SHA256 f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788
- MD5 0158fa0390d7bb7f3024835d99d3fc82
- SHA1 060ac9aab2e80b6a2feb9825fcfd1871973d3eb8
- SHA512 d4a16937845addbbf8d3944a3cf0240af4938f927be8e5de2a14a2bd0687128fbcf6289e9db289b8de2222acc039bb643db0c2423da4e0ea9a198900d79176c2
- SSDEEP 6144:Kgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:KI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1A5C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788
- Size 560KB
- SHA256 f9227c1436992bfd72bde9bedf2cb24b2dd56cd82d6af4014e445de672ead788
- MD5 0158fa0390d7bb7f3024835d99d3fc82
- SHA1 060ac9aab2e80b6a2feb9825fcfd1871973d3eb8
- SHA512 d4a16937845addbbf8d3944a3cf0240af4938f927be8e5de2a14a2bd0687128fbcf6289e9db289b8de2222acc039bb643db0c2423da4e0ea9a198900d79176c2
- SSDEEP 6144:Kgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:KI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T1A5C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA7D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory