General
- Target ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f
- Size 1.4MB
- Sample260731-17ppcahq4y
- SHA256 ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f
- MD5 8927f0e5cee8c7532cf2938fe5fe47ff
- SHA1 77f9bf88d67d5da077c36f82621b8a25025f3f39
- SHA512 e61e0c7fc2569f699a34804ed43bd5a56a94df7e6e45bf9992ac66540650288ab9674779d505176072f4daa2e8b1b975a1c6fdd2f1c739f78801305c9ff1934f
- SSDEEP 24576:FjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:FTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1B7658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f
- Size 1.4MB
- SHA256 ef0a932ac046847081a9c736f1a7a5e49b02c7e38d03b15c33c83785b225ab4f
- MD5 8927f0e5cee8c7532cf2938fe5fe47ff
- SHA1 77f9bf88d67d5da077c36f82621b8a25025f3f39
- SHA512 e61e0c7fc2569f699a34804ed43bd5a56a94df7e6e45bf9992ac66540650288ab9674779d505176072f4daa2e8b1b975a1c6fdd2f1c739f78801305c9ff1934f
- SSDEEP 24576:FjHPOSOkx2LFscU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:FTGkQy56/OJdJCXDrsOFZMjHfUr
- TLSH T1B7658E31AAC14132E2B3867186FA56F6A5257C222711E5CF62C97B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory