General
- Target 64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643
- Size 395KB
- Sample260802-etcxqsdj41
- SHA256 64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643
- MD5 5bcdda938c93713ad3e4375e9951cabd
- SHA1 a8c7234b18f0099a9ef46941fd29efdcea9aa1f5
- SHA512 8255ea937908ea076a9e1197eaa9600f1b63da12a2847d4e3281e53b51f01cf39b6601d189397f7cd3e8c0ad1b9c4ffd80005d6e345693d461a3525e14a753a3
- SSDEEP 6144:KWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:KkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BF846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643
- Size 395KB
- SHA256 64f4bea904da57191e579ebab3e88fe9988ee3ba2ea2bc9c72631380fdfd4643
- MD5 5bcdda938c93713ad3e4375e9951cabd
- SHA1 a8c7234b18f0099a9ef46941fd29efdcea9aa1f5
- SHA512 8255ea937908ea076a9e1197eaa9600f1b63da12a2847d4e3281e53b51f01cf39b6601d189397f7cd3e8c0ad1b9c4ffd80005d6e345693d461a3525e14a753a3
- SSDEEP 6144:KWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:KkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1BF846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory