General
- Target bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4
- Size 615KB
- Sample260728-h43spa1dqa
- SHA256 bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4
- MD5 c1cc4ae6e26c02752253c51da1278435
- SHA1 8621b1a1112cad8f7b3960e49684ec713a4f50a9
- SHA512 aef1faaf00aebcaed39d00aa150b03214e272b9f2d881d37a3f9bee61c9d5899ea03160b4882c713ea01e52dd1ad057ddc321ce5be5269aaac293e023d79deee
- SSDEEP 12288:kSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:XvO2xJKRI2FOkx2LFicUV
- TLSH T148D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4
- Size 615KB
- SHA256 bd8b47701951a9ced2e7c76f0ece1d0a68488349eaf74b383d29625c38db83d4
- MD5 c1cc4ae6e26c02752253c51da1278435
- SHA1 8621b1a1112cad8f7b3960e49684ec713a4f50a9
- SHA512 aef1faaf00aebcaed39d00aa150b03214e272b9f2d881d37a3f9bee61c9d5899ea03160b4882c713ea01e52dd1ad057ddc321ce5be5269aaac293e023d79deee
- SSDEEP 12288:kSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:XvO2xJKRI2FOkx2LFicUV
- TLSH T148D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory