General
- Target 131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414
- Size 419KB
- Sample260801-ltvacagg85
- SHA256 131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414
- MD5 017de0baab310a192ddc19247f22f148
- SHA1 03e5cc0529cb93342793949191f58d4d2ba46935
- SHA512 cddf03d3e5660da7fe193aacfb993c61fae7523efd06b0fe690c8c3abe26f850175f0eb39f658645afb57948973afd4fda4832e51ce75ece8e492c6ad0d28dde
- SSDEEP 6144:YatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:YatG+S9+kaTDHrOkx2LIa
- TLSH T158948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414
- Size 419KB
- SHA256 131a18a39424d445685f62732acef89f0eb75423feeff05ffd695e3639bcf414
- MD5 017de0baab310a192ddc19247f22f148
- SHA1 03e5cc0529cb93342793949191f58d4d2ba46935
- SHA512 cddf03d3e5660da7fe193aacfb993c61fae7523efd06b0fe690c8c3abe26f850175f0eb39f658645afb57948973afd4fda4832e51ce75ece8e492c6ad0d28dde
- SSDEEP 6144:YatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:YatG+S9+kaTDHrOkx2LIa
- TLSH T158948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory