General
- Target b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d
- Size 832KB
- Sample260727-x18bbszbrc
- SHA256 b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d
- MD5 f4507c1d350a7c462bcf11586c3e43dc
- SHA1 ba7351b3deaf9fe30b0f25503795d88fd39f167b
- SHA512 14471f69e055a5f770059b34bda15e83d4d71612802c11057aa9701f57cd5a7d81e68ba0da69d4a8be28f3616807291969f5fb41c1bb34981de7134ceec16b59
- SSDEEP 12288:6qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:6jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1B1059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d
- Size 832KB
- SHA256 b667f3d19862393feff484d4bc52605c57cc165704bef1df79f8013c1093cc8d
- MD5 f4507c1d350a7c462bcf11586c3e43dc
- SHA1 ba7351b3deaf9fe30b0f25503795d88fd39f167b
- SHA512 14471f69e055a5f770059b34bda15e83d4d71612802c11057aa9701f57cd5a7d81e68ba0da69d4a8be28f3616807291969f5fb41c1bb34981de7134ceec16b59
- SSDEEP 12288:6qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:6jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T1B1059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory