General
- Target c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594
- Size 873KB
- Sample260801-vwvtbstyft
- SHA256 c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594
- MD5 46a7e6eb875a4796ff9445daf20f8ada
- SHA1 d457272437717a85f9b262afa8438cfc90a1445b
- SHA512 21fb662eb7dc9e25a4f64f99baf0be17da277ecd687701fffa3c05e731f337b647ab9cf60bae71137fcfff21839abe63b39b9da597ed96ef2243f930fbba5090
- SSDEEP 12288:TSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Lik8CQ3uEW:mvO2xJKRh2kOkx2LFxNcUQPxW
- TLSH T1DE156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594
- Size 873KB
- SHA256 c761bfd295c09d3644fab2368f2a6d734fbb73dabd4e24a4187ec30a6fd02594
- MD5 46a7e6eb875a4796ff9445daf20f8ada
- SHA1 d457272437717a85f9b262afa8438cfc90a1445b
- SHA512 21fb662eb7dc9e25a4f64f99baf0be17da277ecd687701fffa3c05e731f337b647ab9cf60bae71137fcfff21839abe63b39b9da597ed96ef2243f930fbba5090
- SSDEEP 12288:TSvO2x9mONvKRhLSFtsOkx2LIaeyk5FAQjU/Lik8CQ3uEW:mvO2xJKRh2kOkx2LFxNcUQPxW
- TLSH T1DE156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory