General
- Target 72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949
- Size 618KB
- Sample260730-yd923swemc
- SHA256 72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949
- MD5 dffb07713ae3dd191c9ab1c014c20f90
- SHA1 ae218aac131d0bd4d20292ee5cb839a7adb21f39
- SHA512 05c4ec76c43b6c9d074e9a345fd295c7542cee0ce739ae36a34a9b4cb71f158010dbad78b6e51fa83190944bbba712f31e43b903ff299628387d856dd8a4b193
- SSDEEP 12288:yqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:yjHPOSOkx2LFscUQPxW
- TLSH T16DD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949
- Size 618KB
- SHA256 72cd84ce563ffd3fc2b714cafcda016620710926ce79b5265a657c6786b1c949
- MD5 dffb07713ae3dd191c9ab1c014c20f90
- SHA1 ae218aac131d0bd4d20292ee5cb839a7adb21f39
- SHA512 05c4ec76c43b6c9d074e9a345fd295c7542cee0ce739ae36a34a9b4cb71f158010dbad78b6e51fa83190944bbba712f31e43b903ff299628387d856dd8a4b193
- SSDEEP 12288:yqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:yjHPOSOkx2LFscUQPxW
- TLSH T16DD47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory