General
- Target 90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d
- Size 419KB
- Sample260801-ythyjavhmg
- SHA256 90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d
- MD5 d1a60f4aa770473c18b931961be43213
- SHA1 78ff8e63e1d3ba97db5cd297320e00ff6b7c123c
- SHA512 9b0348592f6dda6ebae82bf53a191032bf8d05281cbf2fe6bbcda51c0a0f950d08e03307865b43de356fe659c41fb8cee39e0d18a082bb3c75dee600cb05ac2f
- SSDEEP 6144:6atygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:6atG+S9+kaTDHrOkx2LIa
- TLSH T1B2948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d
- Size 419KB
- SHA256 90f871f419254e755c3ca1c1c6e96ad0e424df7da45f5f89b5f211673e3cf23d
- MD5 d1a60f4aa770473c18b931961be43213
- SHA1 78ff8e63e1d3ba97db5cd297320e00ff6b7c123c
- SHA512 9b0348592f6dda6ebae82bf53a191032bf8d05281cbf2fe6bbcda51c0a0f950d08e03307865b43de356fe659c41fb8cee39e0d18a082bb3c75dee600cb05ac2f
- SSDEEP 6144:6atygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:6atG+S9+kaTDHrOkx2LIa
- TLSH T1B2948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory