General
- Target 42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489
- Size 374KB
- Sample260802-jlw3vsfb97
- SHA256 42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489
- MD5 6e3969f29772f24c69132c6a85e1f6f4
- SHA1 466ff8b9ffb63e0b9ae25cedccc53986396531ec
- SHA512 7a1fe7925e95774039fb61e2fd5211584a1fc54eca02b43b5c96888aee3494b0e2af2b884d2ad4981d0c2231783c2f67d9ce9aebbaa2d0d94847e0ff59641524
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:qSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1E8846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489
- Size 374KB
- SHA256 42446ceec80e1ea52ea46a8a1f67d49849c9378d71c5fb8e3e640d26d8e97489
- MD5 6e3969f29772f24c69132c6a85e1f6f4
- SHA1 466ff8b9ffb63e0b9ae25cedccc53986396531ec
- SHA512 7a1fe7925e95774039fb61e2fd5211584a1fc54eca02b43b5c96888aee3494b0e2af2b884d2ad4981d0c2231783c2f67d9ce9aebbaa2d0d94847e0ff59641524
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:qSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1E8846D2AF6A0D076C4779579C4A247AAFBB1742137208ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory