General
- Target f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808
- Size 1.8MB
- Sample260722-yp4dnsgl3z
- SHA256 f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808
- MD5 bc753fcf77ef0dc0c923443e3f2a780b
- SHA1 e4ecacdad9ae23ab61f8149a0902beefbd88ebff
- SHA512 56ec1c167e9f7be2b1a796ecbf63d0896bed356a113a13d17e3dc69e5421fafe8a9fc164499d6ececc35f2e56dc0f12bdd98ec8509c23494dcf4fc032aa0b9ac
- SSDEEP 49152:MHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:MnKdtWsM0r1QnxK4e
- TLSH T15485AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808
- Size 1.8MB
- SHA256 f8fad9e6855f6a4b121d5ee3efe29f5c506173d0df1aa16d8b558edb12406808
- MD5 bc753fcf77ef0dc0c923443e3f2a780b
- SHA1 e4ecacdad9ae23ab61f8149a0902beefbd88ebff
- SHA512 56ec1c167e9f7be2b1a796ecbf63d0896bed356a113a13d17e3dc69e5421fafe8a9fc164499d6ececc35f2e56dc0f12bdd98ec8509c23494dcf4fc032aa0b9ac
- SSDEEP 49152:MHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:MnKdtWsM0r1QnxK4e
- TLSH T15485AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory