General
- Target f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
- Size 374KB
- Sample260730-yd78gswelb
- SHA256 f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
- MD5 2d726daa93167f2603fa7941d6421a03
- SHA1 0b0113d9f89261450bded3b645184f2264f2a273
- SHA512 982598dc8a6ec5db5ec3c4baf7ab9666dc5b730a4d530d81929a670bac96e27378d353a0ea82c72b040c9afda911af4170092a439e2563b05883a64f86b5cf27
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:lSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T1AA846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
- Size 374KB
- SHA256 f85ef262022a4bbde8a47dc38ee1bb8ba669ab6f8d3ec65e36c72a4b6be3b503
- MD5 2d726daa93167f2603fa7941d6421a03
- SHA1 0b0113d9f89261450bded3b645184f2264f2a273
- SHA512 982598dc8a6ec5db5ec3c4baf7ab9666dc5b730a4d530d81929a670bac96e27378d353a0ea82c72b040c9afda911af4170092a439e2563b05883a64f86b5cf27
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:lSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T1AA846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory