General
- Target 297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b
- Size 395KB
- Sample260801-xc32pstejb
- SHA256 297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b
- MD5 6871982900362dcefae74c0b202f057e
- SHA1 5f9469c95502612c7d41a721566350693103aa1f
- SHA512 5b2371e41d0096b084944b153318253a1876aea8e3e63fa4ffb636bad8e4fb2ab5e3da9e556489e9b7647db7159cee9b1fbd9abbadb5214be121c358bd452cd9
- SSDEEP 6144:UcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:UCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1C4846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b
- Size 395KB
- SHA256 297153815261cebd603ae9c6d57fee333e0dac6807fe5f3e54abb9bebe97ac0b
- MD5 6871982900362dcefae74c0b202f057e
- SHA1 5f9469c95502612c7d41a721566350693103aa1f
- SHA512 5b2371e41d0096b084944b153318253a1876aea8e3e63fa4ffb636bad8e4fb2ab5e3da9e556489e9b7647db7159cee9b1fbd9abbadb5214be121c358bd452cd9
- SSDEEP 6144:UcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:UCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1C4846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory