General
- Target c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34
- Size 395KB
- Sample260723-dnswbsff94
- SHA256 c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34
- MD5 553aec3585997187b9005d8c6b5f96f6
- SHA1 64598cec44cf352c969e6aa1a17cdade30895078
- SHA512 ba1d5ea90afdc77f826bd08fc03cd985a781dce2ecae1136dd0e48dee9af7a9c6a839d4e57c3c7575a9973706073c53416c8dad9557571d41bda48fa006a53d5
- SSDEEP 6144:vWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:vkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T193846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34
- Size 395KB
- SHA256 c1e30ce516ec00d8bf14a1febb86dc2be786af8f81bd93ab262453ad61a4ac34
- MD5 553aec3585997187b9005d8c6b5f96f6
- SHA1 64598cec44cf352c969e6aa1a17cdade30895078
- SHA512 ba1d5ea90afdc77f826bd08fc03cd985a781dce2ecae1136dd0e48dee9af7a9c6a839d4e57c3c7575a9973706073c53416c8dad9557571d41bda48fa006a53d5
- SSDEEP 6144:vWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:vkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T193846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory