General
- Target cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d
- Size 832KB
- Sample260731-qk5f6sbb73
- SHA256 cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d
- MD5 c74f3c910777a0a02e191cf5afc3d540
- SHA1 0715d30525e93222abd13801b8a0b75034087542
- SHA512 e9e579df8d16ae0b210acadf2db9b0403761069012c39688be3809076ee17f2c70247e923aab1140b46dcb22849b7e411943a99a9c4cd8914f56896928c6c73a
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:/jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T190059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d
- Size 832KB
- SHA256 cf2dc71cf1199b1008e4a4d164bf1a967557573f90b99d4d9a646a250b25a71d
- MD5 c74f3c910777a0a02e191cf5afc3d540
- SHA1 0715d30525e93222abd13801b8a0b75034087542
- SHA512 e9e579df8d16ae0b210acadf2db9b0403761069012c39688be3809076ee17f2c70247e923aab1140b46dcb22849b7e411943a99a9c4cd8914f56896928c6c73a
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEuZ9oawhtyybAsLAkQ:/jHPOSOkx2LFscUQPxuZ98Es8kQ
- TLSH T190059D21E202C13AD49701B2C6BE0BAFA5687D15432561C7E3D87D6A2FB61D2BE3171F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory