General
- Target 2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9
- Size 419KB
- Sample260802-jhbmraeq2v
- SHA256 2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9
- MD5 2de51e194a31cc49f299991f35805648
- SHA1 29daf9ac16cab8b18553af9783de41d00f431789
- SHA512 b0455f255d2a2be48f80deb9d8b207c3a295a2797b96050dc0162c1da1495f69b1311dc1a3594e2e89d3152cd0c073da9a2302b33dc6424b5f300e9179f1872f
- SSDEEP 6144:jatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:jatG+S9+kaTDHrOkx2LIa
- TLSH T12F948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9
- Size 419KB
- SHA256 2a3ce2e20817ff956e40eb20c1a1acdca52c5b0b3b8a462085ff79da1d57cda9
- MD5 2de51e194a31cc49f299991f35805648
- SHA1 29daf9ac16cab8b18553af9783de41d00f431789
- SHA512 b0455f255d2a2be48f80deb9d8b207c3a295a2797b96050dc0162c1da1495f69b1311dc1a3594e2e89d3152cd0c073da9a2302b33dc6424b5f300e9179f1872f
- SSDEEP 6144:jatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:jatG+S9+kaTDHrOkx2LIa
- TLSH T12F948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory