General
- Target e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188
- Size 832KB
- Sample260801-xrfvqaep9z
- SHA256 e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188
- MD5 d8a058a7380d4858a239ec54c18c6d22
- SHA1 8365cba0456cae3ab9c4148e93600570b84500a4
- SHA512 99f3eef476e1e55fc533782b28b0a25399eb964e09fec8fdc489fc66e55a450e42e12c779a6cd07d2c9492c3adb2cdc9ab2ccd105908e01acc3d90bcda8d3af2
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:BvO2xJKRI2FOkx2LFEAcUY
- TLSH T10A056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188
- Size 832KB
- SHA256 e13d0d2f95f3cd0b8cd20ba0333051ca9ffb71a2aac9d2afd67f1f9fc05e3188
- MD5 d8a058a7380d4858a239ec54c18c6d22
- SHA1 8365cba0456cae3ab9c4148e93600570b84500a4
- SHA512 99f3eef476e1e55fc533782b28b0a25399eb964e09fec8fdc489fc66e55a450e42e12c779a6cd07d2c9492c3adb2cdc9ab2ccd105908e01acc3d90bcda8d3af2
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:BvO2xJKRI2FOkx2LFEAcUY
- TLSH T10A056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory