General
- Target 9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b
- Size 615KB
- Sample260729-y2dnsaec74
- SHA256 9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b
- MD5 8ac85922e5d19c7bed783eeda025287e
- SHA1 3d863a1c2d45ec1fed13364308e025918c7d579c
- SHA512 aecec0695c0d0c9c8734f2bc2300c3ac70fdfc5a1cac25a07369985b7414e7a66d241f9d8cafa9cf819d5019727827bb47672362b1ac9ad05cfcf45bae80f1ef
- SSDEEP 12288:4SvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:TvO2xJKRI2FOkx2LFicUV
- TLSH T18ED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b
- Size 615KB
- SHA256 9dea458c7b5775a9cf84cb1e655648fc611fccd3900cd343f0713ed8bbf0de8b
- MD5 8ac85922e5d19c7bed783eeda025287e
- SHA1 3d863a1c2d45ec1fed13364308e025918c7d579c
- SHA512 aecec0695c0d0c9c8734f2bc2300c3ac70fdfc5a1cac25a07369985b7414e7a66d241f9d8cafa9cf819d5019727827bb47672362b1ac9ad05cfcf45bae80f1ef
- SSDEEP 12288:4SvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:TvO2xJKRI2FOkx2LFicUV
- TLSH T18ED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory