General
- Target 2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f
- Size 704KB
- Sample260730-ds37vsyclb
- SHA256 2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f
- MD5 aaf6c82b3f5ec210c728f0ef4c0ca221
- SHA1 527185b956bddaf1b8f0327ace3c32e5087d7846
- SHA512 a262523f92b9542978b7040441719c78219d1f24660b22e95cf3f59d7077f6e0bf77c72a20749eb1d436e92b5cf66bced865905221259640f9c8cf24c90e0078
- SSDEEP 12288:cSvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:vvO2xJKRI2FOkx2LFEF
- TLSH T1AAE46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f
- Size 704KB
- SHA256 2491f1be3ca0e92a2873d6fa37176d428e5dcc0f67c474cc5f6c7a78e36d871f
- MD5 aaf6c82b3f5ec210c728f0ef4c0ca221
- SHA1 527185b956bddaf1b8f0327ace3c32e5087d7846
- SHA512 a262523f92b9542978b7040441719c78219d1f24660b22e95cf3f59d7077f6e0bf77c72a20749eb1d436e92b5cf66bced865905221259640f9c8cf24c90e0078
- SSDEEP 12288:cSvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:vvO2xJKRI2FOkx2LFEF
- TLSH T1AAE46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory