General
- Target 877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18
- Size 1.2MB
- Sample260730-g1nc6a1fng
- SHA256 877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18
- MD5 a1f39d68cf5e11d8e4f3f88f7f97eeeb
- SHA1 8ca49ccd2830fc1db6d73c47ccdfaa965442c028
- SHA512 4c922f363dd8aa6821b642f6b941d2523f011b3e3fae6d9039527e4449e470c95aa6deb7257f8c70bc9d9d9eb5ea66183470d2938e8c51492c644014b6cf7e4d
- SSDEEP 24576:3vO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+y:3HHKX2WQt5QZuTtS0rQi
- TLSH T135558D31E641C036D5A70175C6BA4BBFA5787D21032565CBE3D43E6A2FB22D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18
- Size 1.2MB
- SHA256 877d00fafdf1932f7c8e023cae429d5fc4b2e01710f1b86da8eb3790e4914d18
- MD5 a1f39d68cf5e11d8e4f3f88f7f97eeeb
- SHA1 8ca49ccd2830fc1db6d73c47ccdfaa965442c028
- SHA512 4c922f363dd8aa6821b642f6b941d2523f011b3e3fae6d9039527e4449e470c95aa6deb7257f8c70bc9d9d9eb5ea66183470d2938e8c51492c644014b6cf7e4d
- SSDEEP 24576:3vO2xJKRh2kOkx2LFxNcUQPxuZ98Es8k3OH3C0rQ6+y:3HHKX2WQt5QZuTtS0rQi
- TLSH T135558D31E641C036D5A70175C6BA4BBFA5787D21032565CBE3D43E6A2FB22D2AA3170F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory