General
- Target 40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df
- Size 1.6MB
- Sample260731-ndcfpshd37
- SHA256 40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df
- MD5 ed7e423ca8cab45739d2b1feef83f38b
- SHA1 cbc85c07923f2904a1655566800346d890c27977
- SHA512 b5376dd4e27ffdd21c413108005c386175fc59d7962489ed687e3dafac4bbd74be96336f8fab3414243001d36f79f7d670e2a38381307cff4bd13929f63347fa
- SSDEEP 24576:svO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:sHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T1F2759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df
- Size 1.6MB
- SHA256 40cc6c171416608a7a9f208f3becfb18083687a078d67d2b37459e6eb3e6b6df
- MD5 ed7e423ca8cab45739d2b1feef83f38b
- SHA1 cbc85c07923f2904a1655566800346d890c27977
- SHA512 b5376dd4e27ffdd21c413108005c386175fc59d7962489ed687e3dafac4bbd74be96336f8fab3414243001d36f79f7d670e2a38381307cff4bd13929f63347fa
- SSDEEP 24576:svO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:sHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T1F2759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory