General
- Target 592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49
- Size 638KB
- Sample260802-j35rbsfe64
- SHA256 592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49
- MD5 ca3072899e8116ffa4c6b4c9cb34c504
- SHA1 612e99319a57ded594b0f805ba1bc3936f5291be
- SHA512 d9f64abc922bfd2d6bf6987e6ba4b1814924ba9a0ee4897767f4233671c15e0593604cc7de451dcfa50998537132fd4268230890064350903112ba1604c86f35
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:LSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T191D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49
- Size 638KB
- SHA256 592e5b91019cea59234fa51406763e408955f901dac233b6cc6ebc4e3ae5ff49
- MD5 ca3072899e8116ffa4c6b4c9cb34c504
- SHA1 612e99319a57ded594b0f805ba1bc3936f5291be
- SHA512 d9f64abc922bfd2d6bf6987e6ba4b1814924ba9a0ee4897767f4233671c15e0593604cc7de451dcfa50998537132fd4268230890064350903112ba1604c86f35
- SSDEEP 6144:LcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8KU5R2:LSvO2x9mONvKRwLSFtsOkx2LIa+ya5g
- TLSH T191D46B26B6908037C0B74675C5B64BAAFAB5BC21631186CFA380761A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory