General
- Target 922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f
- Size 511KB
- Sample260722-x4pndsshrf
- SHA256 922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f
- MD5 0e9e5ee6777444c0a563b18b33b71a47
- SHA1 5646bdfa6bf0da4eaf9e198ba77b057a38ec80de
- SHA512 d4d02bedce3c5634d502b171983c471b8af73345636da58dcec3ab342a2c05381f9410654afdee18b0127b0bcf44ab2fe880fedf5b84711990758d7a78d0b7af
- SSDEEP 6144:tycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:MSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T132B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f
- Size 511KB
- SHA256 922cfb0b5cf9d0920b1224bb815d0f29d86b19f1dc4baf882c52fc6f4a18fc5f
- MD5 0e9e5ee6777444c0a563b18b33b71a47
- SHA1 5646bdfa6bf0da4eaf9e198ba77b057a38ec80de
- SHA512 d4d02bedce3c5634d502b171983c471b8af73345636da58dcec3ab342a2c05381f9410654afdee18b0127b0bcf44ab2fe880fedf5b84711990758d7a78d0b7af
- SSDEEP 6144:tycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:MSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T132B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory