General
- Target 79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c
- Size 1.7MB
- Sample260802-fr516stsdv
- SHA256 79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c
- MD5 320e07da26646042988d1f2775daa7b5
- SHA1 b60e1f488be9ad9ae8cc58569ac415b67e4216be
- SHA512 27dd00c98061f3ab7a5e0b90d1d03eb7ab7d80d6e8dd011748afe85551cf55933e1fee7cea0ea3fac3b0a051e76ab0479203e1b0524c123adfd668f5d123db12
- SSDEEP 24576:OvO2xJKRh2kOkx2LFxNcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:OHHKX2WQt56/OJdJCXDrsOFZMjHfUr
- TLSH T1F5858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c
- Size 1.7MB
- SHA256 79f4aabd6c12ad273e2e6af342686563844b0302160f9a34a7e954470446e06c
- MD5 320e07da26646042988d1f2775daa7b5
- SHA1 b60e1f488be9ad9ae8cc58569ac415b67e4216be
- SHA512 27dd00c98061f3ab7a5e0b90d1d03eb7ab7d80d6e8dd011748afe85551cf55933e1fee7cea0ea3fac3b0a051e76ab0479203e1b0524c123adfd668f5d123db12
- SSDEEP 24576:OvO2xJKRh2kOkx2LFxNcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:OHHKX2WQt56/OJdJCXDrsOFZMjHfUr
- TLSH T1F5858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory