General
- Target 9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8
- Size 10.4MB
- Sample260729-28kmfsvbla
- SHA256 9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8
- MD5 3fccebc2d3377e69f660782e85f74f7f
- SHA1 d11f5cc0e632ea593998f4f255b04bf01be84278
- SHA512 8883c06f06e92f4829ef490cd91a65622c59b11a743fb52bd5b2fd7d5829a2436ef4f05d6377bb8fd081763b711774250aa9cdcd2b3ab968ead52dbb07106275
- SSDEEP 196608:XZGmumsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnmsREJLODBWlX3d+NpvdHIoP
- TLSH T121B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8.exe
Resource
win10v2004-20260513-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8.exe
Resource
win11ltsc2024-20260709-en
6 signatures
150 seconds
Malware Config
Targets
-
- Target 9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8
- Size 10.4MB
- SHA256 9b8f8cf8cfa52ef496597389e699a2d30279fbeb52d893dca8e4fa77dd3434d8
- MD5 3fccebc2d3377e69f660782e85f74f7f
- SHA1 d11f5cc0e632ea593998f4f255b04bf01be84278
- SHA512 8883c06f06e92f4829ef490cd91a65622c59b11a743fb52bd5b2fd7d5829a2436ef4f05d6377bb8fd081763b711774250aa9cdcd2b3ab968ead52dbb07106275
- SSDEEP 196608:XZGmumsR2/LGPLCXOKODxH5qFlXS47dV2MANpvrjVbEKGWIoSg:XZGnmsREJLODBWlX3d+NpvdHIoP
- TLSH T121B61233A1908066D289193956736F3879F8975D5EB0CCB3F7E4ECE22D624E1E72710A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Suspicious use of NtSetInformationThreadHideFromDebugger