General
- Target 32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1
- Size 395KB
- Sample260730-ftvcfscb84
- SHA256 32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1
- MD5 caec418cac9048e6d51023ccd562acd4
- SHA1 69281770a6595994c6159207af09ec6226c22d79
- SHA512 ea2e12955d4e9946cb6faad61dc8ba26a5331fc384ae533a8f22afcf92db0ac306144f28dfa066a6e169734415e3e91e1b3f7cfddb9b4bd9ca3f287c04fb198e
- SSDEEP 6144:NWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:NkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1CC846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1
- Size 395KB
- SHA256 32f861c2759666068977e694bc904196d0d2d227eeafe656c91e54e5c7b676a1
- MD5 caec418cac9048e6d51023ccd562acd4
- SHA1 69281770a6595994c6159207af09ec6226c22d79
- SHA512 ea2e12955d4e9946cb6faad61dc8ba26a5331fc384ae533a8f22afcf92db0ac306144f28dfa066a6e169734415e3e91e1b3f7cfddb9b4bd9ca3f287c04fb198e
- SSDEEP 6144:NWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:NkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1CC846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory