General
- Target 00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869
- Size 768KB
- Sample260802-qfzecsad99
- SHA256 00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869
- MD5 37e28a9b7230d65b2e7749931111a595
- SHA1 f6bd282105f2e0e967d34a091234838adb0163f9
- SHA512 930f9f9e3e6525a1df22304f4fc02e0da9453acb58afe8c02a51f9d498671156e056b4a464f5334fcfdfa57e4b6e2dcecc622b764fa55cab471e7ad8dc3c9133
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:/jHPOSOkx2LFscU6UQOJdT
- TLSH T198F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869
- Size 768KB
- SHA256 00af83b9e2a056fbc9dbee2305045e098df7d33d7e7e7f7d1d5c0e54ac348869
- MD5 37e28a9b7230d65b2e7749931111a595
- SHA1 f6bd282105f2e0e967d34a091234838adb0163f9
- SHA512 930f9f9e3e6525a1df22304f4fc02e0da9453acb58afe8c02a51f9d498671156e056b4a464f5334fcfdfa57e4b6e2dcecc622b764fa55cab471e7ad8dc3c9133
- SSDEEP 12288:/qXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:/jHPOSOkx2LFscU6UQOJdT
- TLSH T198F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory