General
- Target f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0
- Size 873KB
- Sample260726-y4rcna1vcs
- SHA256 f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0
- MD5 976312d5e05b47d33b92a6245a3c4610
- SHA1 79e8c0ce05241edb24d1a9cd896e14886d2935e9
- SHA512 01f2580f8ac860b7f210015f77910f68fe3291784543893dea63beefebd9b35bfb9e63ea0718b31e8fa09e6c71b1988fc8558a9eabc71c2ed6a4a7888047f6e7
- SSDEEP 12288:DSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:2vO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T137156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0
- Size 873KB
- SHA256 f8d93d037e74a38a94d29b4efd917686bff2a6c2a0e19a1bfdd2acab4f06bda0
- MD5 976312d5e05b47d33b92a6245a3c4610
- SHA1 79e8c0ce05241edb24d1a9cd896e14886d2935e9
- SHA512 01f2580f8ac860b7f210015f77910f68fe3291784543893dea63beefebd9b35bfb9e63ea0718b31e8fa09e6c71b1988fc8558a9eabc71c2ed6a4a7888047f6e7
- SSDEEP 12288:DSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:2vO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T137156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory