General
- Target 259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a
- Size 3.3MB
- Sample260727-kcdqlayyby
- SHA256 259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a
- MD5 65b728a95134b50932ba0620718d6762
- SHA1 731226af30ee6e998f5e02612342abfdb003fab4
- SHA512 1955cf41d42ed0c050173be169b57bc7188185a059b256052e8f8d035daa9fc6b60e5f896f7d8148527840fbcd24959da416bf804525ce7ee4af365dafb79274
- SSDEEP 24576:xvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:xHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T131F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a
- Size 3.3MB
- SHA256 259f16a8af497197830a44ea7dac72c71a09df7b3e0b1c730a53e5ee7bc2322a
- MD5 65b728a95134b50932ba0620718d6762
- SHA1 731226af30ee6e998f5e02612342abfdb003fab4
- SHA512 1955cf41d42ed0c050173be169b57bc7188185a059b256052e8f8d035daa9fc6b60e5f896f7d8148527840fbcd24959da416bf804525ce7ee4af365dafb79274
- SSDEEP 24576:xvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:xHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T131F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory