General
- Target c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad
- Size 618KB
- Sample260801-r63edacb33
- SHA256 c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad
- MD5 8422993b1de35e9813be51ff77e66915
- SHA1 da7d212a6a35b9a664e7976b8cb1daf261545b1f
- SHA512 a00376ccc54b8151083fad280eac279acb6c7ff5409ad5e9924d9daebe82a86f67fa07fe79dd732070f53e1692476e141a0820a33c7b4a6c6108ba293d412363
- SSDEEP 12288:KqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:KjHPOSOkx2LFscUQPxW
- TLSH T108D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad
- Size 618KB
- SHA256 c5b820978a82e556ed34f4eb81aae8cb5ca32ab9f6a0a32238626b9558bb6fad
- MD5 8422993b1de35e9813be51ff77e66915
- SHA1 da7d212a6a35b9a664e7976b8cb1daf261545b1f
- SHA512 a00376ccc54b8151083fad280eac279acb6c7ff5409ad5e9924d9daebe82a86f67fa07fe79dd732070f53e1692476e141a0820a33c7b4a6c6108ba293d412363
- SSDEEP 12288:KqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3uEW:KjHPOSOkx2LFscUQPxW
- TLSH T108D47C31E201C03AD0A74576C6FE0BAFA5687D25431662C7A3D479362FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory