General
- Target ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec
- Size 560KB
- Sample260727-y2n5hsdn5v
- SHA256 ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec
- MD5 2923a40fef10093dc925e6e4c8db5639
- SHA1 e6e2bbbca4ecaf1ad7712bfaecd7f427669fb8d1
- SHA512 d4d7b0ef5516381496cf6970c344644330a550c9520c8d375e7c9357997237674561435d232e3ebc933c2ef73fa2b1a61622ce7f43ab3808aca2693e6ae8aeb7
- SSDEEP 6144:QWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:QkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1E4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec
- Size 560KB
- SHA256 ebe27dc79b7e8b86620a9c371543d3a004c6af11064db4e3b1e7b7a3c43a19ec
- MD5 2923a40fef10093dc925e6e4c8db5639
- SHA1 e6e2bbbca4ecaf1ad7712bfaecd7f427669fb8d1
- SHA512 d4d7b0ef5516381496cf6970c344644330a550c9520c8d375e7c9357997237674561435d232e3ebc933c2ef73fa2b1a61622ce7f43ab3808aca2693e6ae8aeb7
- SSDEEP 6144:QWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:QkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1E4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory