General
- Target b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1
- Size 1.6MB
- Sample260727-jmgdssbk8t
- SHA256 b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1
- MD5 968610d09eb66d9bd0a27e55f0794a90
- SHA1 82b4fa7dbdbbdf79fb2cf679b901b0f1eb4e2c41
- SHA512 450447f0c2a259bacc91b672a585418d8821d22f04660802456fc245c25ceec654a0f58fc247b81e37185fed5dbc64f0b8d8e0dfe76bdfa968c74b439215d497
- SSDEEP 24576:UvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:UHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T14E759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1
- Size 1.6MB
- SHA256 b9d5570273ad25437507214b5f45f5ba7833176a11c91890c9a0288b6efbe6a1
- MD5 968610d09eb66d9bd0a27e55f0794a90
- SHA1 82b4fa7dbdbbdf79fb2cf679b901b0f1eb4e2c41
- SHA512 450447f0c2a259bacc91b672a585418d8821d22f04660802456fc245c25ceec654a0f58fc247b81e37185fed5dbc64f0b8d8e0dfe76bdfa968c74b439215d497
- SSDEEP 24576:UvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:UHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T14E759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory