General
- Target c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27
- Size 615KB
- Sample260726-zd2ldaga98
- SHA256 c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27
- MD5 6375a4585c1d77b953fa0e69cf3a120f
- SHA1 e48f0ffff17612135f06af8016c5894b573463a9
- SHA512 f77c2ac66c4785af2267c822ff393e3ce516466a3a18224846d720ab36ad1a66c68cf56a95d0899cd4fe69cf7ad76317d28f872bcf78d1dca28bb396b2dbdc71
- SSDEEP 12288:jSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:WvO2xJKRI2FOkx2LFicUV
- TLSH T1BED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27
- Size 615KB
- SHA256 c8f2191274efc86d47a39ef009d6b99ccc59c3b1ab6884044df312e2b5dbad27
- MD5 6375a4585c1d77b953fa0e69cf3a120f
- SHA1 e48f0ffff17612135f06af8016c5894b573463a9
- SHA512 f77c2ac66c4785af2267c822ff393e3ce516466a3a18224846d720ab36ad1a66c68cf56a95d0899cd4fe69cf7ad76317d28f872bcf78d1dca28bb396b2dbdc71
- SSDEEP 12288:jSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:WvO2xJKRI2FOkx2LFicUV
- TLSH T1BED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory