General
- Target unbound_setup_1.25.2.exe
- Size 27.2MB
- Sample260723-ryznhs1cmg
- SHA256 3c9cfb2f4051a927c1f43e0b7932981127e008bf2dc8d8fcf23c0da0e9c2323e
- MD5 a557f72286e340f8fba2a5e1665e559b
- SHA1 d85fca1941e9ecf36adbd3c07b50879e59a2b0ad
- SHA512 5ce50a38e9700e3240ec30b653537c553962095af5b18268aa6b1fd8e7bcfa551bd032a909c7a72d3a5d2f272083958fbe8ad8203e98fd5a7f0da0cbb43abd19
- SSDEEP 786432:GHyi+/UgmlvofnoDpgYW97lz3UmzinGLj2kOtWblm:qyiiUDlvoPK0JJUFnGGn5
- TLSH T1645733001CA932C7F8E41EB181D7A49C2FBFFA4165D55E23895443D30DA3E2677ABA36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
unbound_setup_1.25.2.exe
Resource
win10v2004-20260513-en
20 signatures
150 seconds
Behavioral task
behavioral2
Sample
unbound_setup_1.25.2.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target unbound_setup_1.25.2.exe
- Size 27.2MB
- SHA256 3c9cfb2f4051a927c1f43e0b7932981127e008bf2dc8d8fcf23c0da0e9c2323e
- MD5 a557f72286e340f8fba2a5e1665e559b
- SHA1 d85fca1941e9ecf36adbd3c07b50879e59a2b0ad
- SHA512 5ce50a38e9700e3240ec30b653537c553962095af5b18268aa6b1fd8e7bcfa551bd032a909c7a72d3a5d2f272083958fbe8ad8203e98fd5a7f0da0cbb43abd19
- SSDEEP 786432:GHyi+/UgmlvofnoDpgYW97lz3UmzinGLj2kOtWblm:qyiiUDlvoPK0JJUFnGGn5
- TLSH T1645733001CA932C7F8E41EB181D7A49C2FBFFA4165D55E23895443D30DA3E2677ABA36
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Loads dropped DLL
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.