General
- Target 189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f
- Size 511KB
- Sample260728-yxbcvsgn8s
- SHA256 189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f
- MD5 593000ac2128e814edf553a35a473528
- SHA1 e9161fc26eea42ba00784f77414f556cd4c1eb7a
- SHA512 ec03f5908450d5ade802f7eb6f7fde8580308909f7b9b8b791d24b1fb49ad10b73b10747d4c5dc9fbce5a2e455138f76d4491c2bfba578601067389c14022156
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ySvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T109B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f
- Size 511KB
- SHA256 189e1ed96242c92085f648448d1b797f5851a8777a7710ee193a8d5aee764e4f
- MD5 593000ac2128e814edf553a35a473528
- SHA1 e9161fc26eea42ba00784f77414f556cd4c1eb7a
- SHA512 ec03f5908450d5ade802f7eb6f7fde8580308909f7b9b8b791d24b1fb49ad10b73b10747d4c5dc9fbce5a2e455138f76d4491c2bfba578601067389c14022156
- SSDEEP 6144:ycTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ySvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T109B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory