General
- Target ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5
- Size 560KB
- Sample260802-bazeva1dnd
- SHA256 ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5
- MD5 92afa1bb933ed1aed00080442a26a607
- SHA1 63f9bf2486ae49b73f7ba52e7ddeff0678a89d65
- SHA512 11341dbc40b408b1abb5a2bc14cb104a5c9cd4af0151b440acb13521981a5d287093777ed0883fa0c931be660faf9358ae0778b4f657237695fb473d497f436f
- SSDEEP 6144:BUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:BYsVOdhElvkCgvDLe4usOkxHy
- TLSH T165C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5
- Size 560KB
- SHA256 ac449108c79ccd053b4068e07aef50c11cac6bcaf5d7d6254e837dacfa508bb5
- MD5 92afa1bb933ed1aed00080442a26a607
- SHA1 63f9bf2486ae49b73f7ba52e7ddeff0678a89d65
- SHA512 11341dbc40b408b1abb5a2bc14cb104a5c9cd4af0151b440acb13521981a5d287093777ed0883fa0c931be660faf9358ae0778b4f657237695fb473d497f436f
- SSDEEP 6144:BUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:BYsVOdhElvkCgvDLe4usOkxHy
- TLSH T165C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory