General
- Target 18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6
- Size 576KB
- Sample260719-ylek5saw9r
- SHA256 18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6
- MD5 94a08860cd4efd284d7b110b2c1580df
- SHA1 60cb020a13351c7c97d70c6bd2b1bba17f922998
- SHA512 efa8a49fb9ccb4b87a0f92478fdf4496cba6c367219c4452d3357b06a7f743adc2769b3bddf147f908fb1fd9ca9018c5c2ff97437627332d35df247f88351466
- SSDEEP 6144:4cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:4SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F5C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6
- Size 576KB
- SHA256 18b2eb2f3ccb5552631a41e100162cd599f48652dc70ef220d3a3519636ce4c6
- MD5 94a08860cd4efd284d7b110b2c1580df
- SHA1 60cb020a13351c7c97d70c6bd2b1bba17f922998
- SHA512 efa8a49fb9ccb4b87a0f92478fdf4496cba6c367219c4452d3357b06a7f743adc2769b3bddf147f908fb1fd9ca9018c5c2ff97437627332d35df247f88351466
- SSDEEP 6144:4cTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:4SvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T1F5C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory