General
- Target 20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b
- Size 2.6MB
- Sample260802-hjev5aee75
- SHA256 20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b
- MD5 74c25acaf9b85d9ef8d5ad8b179b2fa6
- SHA1 8c75f07c043e1c8a63f0e421618095e0ef053c6a
- SHA512 b5838e32049c2143dab392ecc29ff0ce2b56cdd6ba80be7b4d150f7876917939afe7637633f5401c540db03116c6d3844066e23befc75c49d30c81716fba5ef4
- SSDEEP 49152:wTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:wKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T18AC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b
- Size 2.6MB
- SHA256 20e28cf3fe27d7576fbf410a6360fbdf58e9a389d76cc2c58f36aa9abd52781b
- MD5 74c25acaf9b85d9ef8d5ad8b179b2fa6
- SHA1 8c75f07c043e1c8a63f0e421618095e0ef053c6a
- SHA512 b5838e32049c2143dab392ecc29ff0ce2b56cdd6ba80be7b4d150f7876917939afe7637633f5401c540db03116c6d3844066e23befc75c49d30c81716fba5ef4
- SSDEEP 49152:wTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:wKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T18AC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory