General
- Target 4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b
- Size 419KB
- Sample260730-drhjrsbr8s
- SHA256 4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b
- MD5 f79e01504148444e2f54f6d25a7a3efa
- SHA1 69013e321496ffa8b0ca9a421f921d86f8e8637f
- SHA512 c1b260645553242317442f51b276eb116cdb887e7d3a4b4bc6f1f5d2f507465fc81b12c851eddf46aaa604ca6844953894a054eee128ccdce9c4d2c977faadd8
- SSDEEP 6144:X8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:sa+4EZe/uwqDvDOkx2LIa
- TLSH T12A948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b
- Size 419KB
- SHA256 4a92c8c46e5834817d44a9ad95c4d30633d915b1931542f1fd54d812196b3f6b
- MD5 f79e01504148444e2f54f6d25a7a3efa
- SHA1 69013e321496ffa8b0ca9a421f921d86f8e8637f
- SHA512 c1b260645553242317442f51b276eb116cdb887e7d3a4b4bc6f1f5d2f507465fc81b12c851eddf46aaa604ca6844953894a054eee128ccdce9c4d2c977faadd8
- SSDEEP 6144:X8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:sa+4EZe/uwqDvDOkx2LIa
- TLSH T12A948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory