General
- Target ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092
- Size 560KB
- Sample260722-xstg7sba76
- SHA256 ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092
- MD5 7125a8fdc60bf46998eaf673ac9b8d80
- SHA1 b3d47da97ef26618d3fccf5474bcdb4fd60ef91d
- SHA512 d7e5863c5d69e2b75a5564c0bdd66ab1fec2e4eaef4cf6bb34d866f5469ec6056206d5e2c9078d612a3d76ad28e168d580758dcf5834126c4b2a30859cf7e22d
- SSDEEP 6144:wUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:wYsVOdhElvkCgvDLe4usOkxHy
- TLSH T187C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092
- Size 560KB
- SHA256 ef0b33196af01dfb12e61c0b429d02e2f1562f92b8f3988e4f666e89ba990092
- MD5 7125a8fdc60bf46998eaf673ac9b8d80
- SHA1 b3d47da97ef26618d3fccf5474bcdb4fd60ef91d
- SHA512 d7e5863c5d69e2b75a5564c0bdd66ab1fec2e4eaef4cf6bb34d866f5469ec6056206d5e2c9078d612a3d76ad28e168d580758dcf5834126c4b2a30859cf7e22d
- SSDEEP 6144:wUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:wYsVOdhElvkCgvDLe4usOkxHy
- TLSH T187C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory