General
- Target 1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d
- Size 525KB
- Sample260802-emdkpatgpg
- SHA256 1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d
- MD5 21ec6b6c782cb6d3f5312c4fa3c09a65
- SHA1 15655e89a3d7099309cd662a9730f7a339b01a15
- SHA512 f491ef978a598c7cb1810a54d9f82148d1468fea5ded8a1abc12b3263b5b740f70e0ede810bb7260e46eab1a49a9816c34aa03df1044656112949e0c88611897
- SSDEEP 6144:acTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:aSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T110B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d
- Size 525KB
- SHA256 1e9e7ea9bed285303152da329b97ce205fb915d215bebeba8f7cc668bbd13a7d
- MD5 21ec6b6c782cb6d3f5312c4fa3c09a65
- SHA1 15655e89a3d7099309cd662a9730f7a339b01a15
- SHA512 f491ef978a598c7cb1810a54d9f82148d1468fea5ded8a1abc12b3263b5b740f70e0ede810bb7260e46eab1a49a9816c34aa03df1044656112949e0c88611897
- SSDEEP 6144:acTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:aSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T110B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory