General
- Target 82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa
- Size 395KB
- Sample260801-wt3a3avtdx
- SHA256 82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa
- MD5 3d93c274eb8579fce7c0396f226b6ecf
- SHA1 f6cf5003433886b3cc1928913d4715cce3674290
- SHA512 3ec28a19548eea10cff1f66ca73595ed98907120d9a358ef3ca946c012c94a1b9af52e97025aa9588c3a8b6c3f55618596c8056403b01e225902cf084e277c2b
- SSDEEP 6144:cWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:ckCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1F6846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa
- Size 395KB
- SHA256 82299dd8a38b78f3bdd954dc8542222c8972b38ae8cfbb3dd9ec86ef427868aa
- MD5 3d93c274eb8579fce7c0396f226b6ecf
- SHA1 f6cf5003433886b3cc1928913d4715cce3674290
- SHA512 3ec28a19548eea10cff1f66ca73595ed98907120d9a358ef3ca946c012c94a1b9af52e97025aa9588c3a8b6c3f55618596c8056403b01e225902cf084e277c2b
- SSDEEP 6144:cWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:ckCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1F6846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory