General
- Target 5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c
- Size 615KB
- Sample260720-x398psew3x
- SHA256 5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c
- MD5 dc387134c230800905023b51a87c56b7
- SHA1 d439f9195e3cf2d80565c5427f1219c6c5ac9271
- SHA512 94ba7cefd9a2803e2e03c14e72b53e4b132af294cc80984153b11d23b778230d74fe6e04d8a85a54c60b4d2ab14ce22696cf208da8ec0e16abcd7dd989ddb863
- SSDEEP 12288:FSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:kvO2xJKRI2FOkx2LFicUV
- TLSH T192D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c
- Size 615KB
- SHA256 5fa33617f37c37d5404b5b2b8cfa0ab1c31aef8a6c635e732ea6c994c9510c0c
- MD5 dc387134c230800905023b51a87c56b7
- SHA1 d439f9195e3cf2d80565c5427f1219c6c5ac9271
- SHA512 94ba7cefd9a2803e2e03c14e72b53e4b132af294cc80984153b11d23b778230d74fe6e04d8a85a54c60b4d2ab14ce22696cf208da8ec0e16abcd7dd989ddb863
- SSDEEP 12288:FSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:kvO2xJKRI2FOkx2LFicUV
- TLSH T192D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory