General
- Target 7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f
- Size 374KB
- Sample260722-yss24stfkc
- SHA256 7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f
- MD5 3713e146571272e7348c0638e71b89ca
- SHA1 248f7e97648f4668f38cc4e2d027bd11cb312e76
- SHA512 495818a349d713128b6e7000e875f5efe3578ca0db8aec1464e97096ba25a8e039d64fdbd45d5a67c13959f925e3214ad97cad8065d3ed83be0b01561edf2fd4
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:lSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T11B846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f
- Size 374KB
- SHA256 7e79d2b94c0d83e8a2208117df0cedcd90eb1f26576da41d4765f5e6dac6c02f
- MD5 3713e146571272e7348c0638e71b89ca
- SHA1 248f7e97648f4668f38cc4e2d027bd11cb312e76
- SHA512 495818a349d713128b6e7000e875f5efe3578ca0db8aec1464e97096ba25a8e039d64fdbd45d5a67c13959f925e3214ad97cad8065d3ed83be0b01561edf2fd4
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:lSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T11B846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory