General
- Target dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f
- Size 615KB
- Sample260724-dn17pszzfx
- SHA256 dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f
- MD5 e511e682c8f230a3325e661bf6eecacb
- SHA1 0dc93e9d3967a38da72ad92fef03f05a42f4c7c1
- SHA512 5ac971e7e5deff1e89f0db4387bf15aa47a4065b0fe32b5514f0f2f93eeed5de34228b795b1c8db5c347604aaff9240c6be574eaa76cd1d8c1462726a39052cc
- SSDEEP 12288:MSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:/vO2xJKRI2FOkx2LFicUV
- TLSH T152D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f
- Size 615KB
- SHA256 dfffc9e6b4e009466872ef6998123a8e5336243386cb2347968ba09f6c59403f
- MD5 e511e682c8f230a3325e661bf6eecacb
- SHA1 0dc93e9d3967a38da72ad92fef03f05a42f4c7c1
- SHA512 5ac971e7e5deff1e89f0db4387bf15aa47a4065b0fe32b5514f0f2f93eeed5de34228b795b1c8db5c347604aaff9240c6be574eaa76cd1d8c1462726a39052cc
- SSDEEP 12288:MSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:/vO2xJKRI2FOkx2LFicUV
- TLSH T152D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory