General
- Target c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921
- Size 1.7MB
- Sample260728-ztr2wahn8s
- SHA256 c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921
- MD5 d56e25bf04b9b1aef485a19fdb6871e7
- SHA1 5e31740ae3a076d9a0a309c0e6d004c9ccb16b2f
- SHA512 8e318d2378652515c850bc6ee486697fc83c36d8675b1c42f994b8723494bcbac1d29d68fb186682f2827c60ec3b81e05e4cc34ec78809dff5fa2b99328d2868
- SSDEEP 24576:vvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:vHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1C8858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921
- Size 1.7MB
- SHA256 c9613b13686e3e2084661e0b6e5473c62e0004cdab6c7a046740b08d4a4db921
- MD5 d56e25bf04b9b1aef485a19fdb6871e7
- SHA1 5e31740ae3a076d9a0a309c0e6d004c9ccb16b2f
- SHA512 8e318d2378652515c850bc6ee486697fc83c36d8675b1c42f994b8723494bcbac1d29d68fb186682f2827c60ec3b81e05e4cc34ec78809dff5fa2b99328d2868
- SSDEEP 24576:vvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:vHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T1C8858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory