General
- Target 703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949
- Size 560KB
- Sample260730-v9j9ratdrg
- SHA256 703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949
- MD5 9f8cda0427ae8995aed7e7f866318123
- SHA1 02d058db5fd1fc762b91cbebffe69b2c2104ec5b
- SHA512 86ec8a97fe2b6bd1e17af8834cdf30cd574dd683885eb5cde19832063120d4176f09603e2c4e8aef867c4015bd75f9613e2af2c18740096293970af324f6c64e
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:FkCO2zVPX7vf1LKlIsOkxHy
- TLSH T10EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949
- Size 560KB
- SHA256 703a4957f44929fec18e563a27bea5a579063a986927a7f61ecb1071c2c0d949
- MD5 9f8cda0427ae8995aed7e7f866318123
- SHA1 02d058db5fd1fc762b91cbebffe69b2c2104ec5b
- SHA512 86ec8a97fe2b6bd1e17af8834cdf30cd574dd683885eb5cde19832063120d4176f09603e2c4e8aef867c4015bd75f9613e2af2c18740096293970af324f6c64e
- SSDEEP 6144:FWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:FkCO2zVPX7vf1LKlIsOkxHy
- TLSH T10EC47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory