General
- Target b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc
- Size 1.7MB
- Sample260801-yrajdagb59
- SHA256 b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc
- MD5 0fbbaa80a064c0cf7e03e1061a01f0eb
- SHA1 a7e2dcfd6ade348c1f3b5a4234a798bab6278db5
- SHA512 35a73d00fb64e04595a8c8561662fd2b38bec2112ae253a6a467c8ef269f08196b8b454e95352a318bf72c29208e587ee5595c1c7185c0397858b2fffb3ff503
- SSDEEP 24576:hvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:hHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T19E858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc
- Size 1.7MB
- SHA256 b4cc4e1ef3cf3ce44cd1a05ef35bd0f4a6f37e1b31614cdb4d145d97121263bc
- MD5 0fbbaa80a064c0cf7e03e1061a01f0eb
- SHA1 a7e2dcfd6ade348c1f3b5a4234a798bab6278db5
- SHA512 35a73d00fb64e04595a8c8561662fd2b38bec2112ae253a6a467c8ef269f08196b8b454e95352a318bf72c29208e587ee5595c1c7185c0397858b2fffb3ff503
- SSDEEP 24576:hvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:hHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T19E858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory