General
- Target ef017744040fe63c80a6d7ec2b5ade7302e0c5c3f50b181baa37a9b4e447b577
- Size 560KB
- Sample260801-wlngyaee97
- SHA256 ef017744040fe63c80a6d7ec2b5ade7302e0c5c3f50b181baa37a9b4e447b577
- MD5 faf3b3bf63b06cc7b7641d9bacba1ef1
- SHA1 18a94f45a30f11d0b15ec6553d9ff2fe23790d0f
- SHA512 db36cfefda682d21ad3fff2252b4b2cb0a07ec346168b9a314ee8679f5e4f386d9a1c4dd5e010799bcbfd48c22fbda86d883c4defcaada410cd5563059009681
- SSDEEP 6144:14ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:1rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T10EC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ef017744040fe63c80a6d7ec2b5ade7302e0c5c3f50b181baa37a9b4e447b577.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ef017744040fe63c80a6d7ec2b5ade7302e0c5c3f50b181baa37a9b4e447b577
- Size 560KB
- SHA256 ef017744040fe63c80a6d7ec2b5ade7302e0c5c3f50b181baa37a9b4e447b577
- MD5 faf3b3bf63b06cc7b7641d9bacba1ef1
- SHA1 18a94f45a30f11d0b15ec6553d9ff2fe23790d0f
- SHA512 db36cfefda682d21ad3fff2252b4b2cb0a07ec346168b9a314ee8679f5e4f386d9a1c4dd5e010799bcbfd48c22fbda86d883c4defcaada410cd5563059009681
- SSDEEP 6144:14ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:1rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T10EC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory