General
- Target 28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5
- Size 832KB
- Sample260727-wysmesbm2v
- SHA256 28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5
- MD5 62ec9fde2d74d0f3fc18bf06ed8e1557
- SHA1 9b3810ed39beebaa046ee5692756cbe0cfca883f
- SHA512 24000d6f5c0268fc9252278724c52864037a9103d7791ef4f5a4bd83059b28740cd3a1a019b613451ea08871bb530f1985278d33b4bbf6e77f56ada8ccb9ff8f
- SSDEEP 12288:nqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:njHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1A8059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5
- Size 832KB
- SHA256 28df4f96ca6bd17cdd16458e9601f6b283e661108809a580f4e5cac94b615cc5
- MD5 62ec9fde2d74d0f3fc18bf06ed8e1557
- SHA1 9b3810ed39beebaa046ee5692756cbe0cfca883f
- SHA512 24000d6f5c0268fc9252278724c52864037a9103d7791ef4f5a4bd83059b28740cd3a1a019b613451ea08871bb530f1985278d33b4bbf6e77f56ada8ccb9ff8f
- SSDEEP 12288:nqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:njHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1A8059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory