General
- Target fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372
- Size 1.6MB
- Sample260801-vwt7sstyey
- SHA256 fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372
- MD5 ba4a3c5750df107d2a63af8a5d1eceb5
- SHA1 ff31e6778e085a65a5e8ca4d3d78c42bd3c5511c
- SHA512 33d0596634c7f9a59ae5000c0a84627e43c4e28191c85dca83a82ce3d5e3f5913ad83684e73e82c2261167bf36990312dd611a9a8c400ab3ed393e4433c10943
- SSDEEP 24576:JvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:JHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T109759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372
- Size 1.6MB
- SHA256 fae0c50dcf60ca8a9a8e60283ae956b19284cea5a9e04f5004b965cb4edde372
- MD5 ba4a3c5750df107d2a63af8a5d1eceb5
- SHA1 ff31e6778e085a65a5e8ca4d3d78c42bd3c5511c
- SHA512 33d0596634c7f9a59ae5000c0a84627e43c4e28191c85dca83a82ce3d5e3f5913ad83684e73e82c2261167bf36990312dd611a9a8c400ab3ed393e4433c10943
- SSDEEP 24576:JvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:JHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T109759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory