General
- Target 89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95
- Size 560KB
- Sample260729-y75dpavtfx
- SHA256 89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95
- MD5 0bbc2d0869bf69e6ab4ef0aa76ccbacc
- SHA1 373a7cc460a5379de7325bb34af73a45dc0c3951
- SHA512 16982359843cabed4450657b75cd97a8c5f6f6f0c8a4d4fbbfbb48037158dfc9655d12045229df7bb86a3be2b2d32be05e6bc7339714fe20bafb9cd94bc0b46c
- SSDEEP 6144:wgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:wI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T199C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95
- Size 560KB
- SHA256 89650d2c498fbf9daef68034e487949fde47b7b383740d6ec4daf3df78c21a95
- MD5 0bbc2d0869bf69e6ab4ef0aa76ccbacc
- SHA1 373a7cc460a5379de7325bb34af73a45dc0c3951
- SHA512 16982359843cabed4450657b75cd97a8c5f6f6f0c8a4d4fbbfbb48037158dfc9655d12045229df7bb86a3be2b2d32be05e6bc7339714fe20bafb9cd94bc0b46c
- SSDEEP 6144:wgye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:wI7OE4kopQzNKFyLWDHsOkxHy
- TLSH T199C48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory