General
- Target 1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9
- Size 395KB
- Sample260729-l85dvsttex
- SHA256 1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9
- MD5 d00402a21768d91d4c8dea73ea5256eb
- SHA1 33720076402e7ab819b903e76831f7fc4e02715a
- SHA512 ac6ec68517a4e3979d5b2a0cb1477bc74822714abe58d238254196e7f960f6b9553225c67af1774291dd6f0bf7afa3a74565905407aa78e9fbcb24aa6fae3428
- SSDEEP 6144:GcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:GCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1DC846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9
- Size 395KB
- SHA256 1ce18b9ce507f2e5cb3156f14e10ed72f96ffd3f510afc6dfd96e0fa6e6436c9
- MD5 d00402a21768d91d4c8dea73ea5256eb
- SHA1 33720076402e7ab819b903e76831f7fc4e02715a
- SHA512 ac6ec68517a4e3979d5b2a0cb1477bc74822714abe58d238254196e7f960f6b9553225c67af1774291dd6f0bf7afa3a74565905407aa78e9fbcb24aa6fae3428
- SSDEEP 6144:GcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:GCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1DC846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory