General
- Target 20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47
- Size 1.6MB
- Sample260802-trbzzswfnc
- SHA256 20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47
- MD5 6c768ddebaa83efcdbb5533b1b308360
- SHA1 68e9ffab4c5c6a41603649fc9baf4926fd6e6184
- SHA512 9dac67a1ccfe1921ac355f9e01c619fe5a2be5fb9c35dc6efaa57853a5fc78d0ac9241e2af458539cc27a1a6138e1ba11ab01bf89a0fb7720774efab1823c441
- SSDEEP 24576:ovO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:oHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T1D8759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47
- Size 1.6MB
- SHA256 20d21cf55c22cd0a1ff1aba87d3c33bb930ef857bc3a12b1621afd6525f01f47
- MD5 6c768ddebaa83efcdbb5533b1b308360
- SHA1 68e9ffab4c5c6a41603649fc9baf4926fd6e6184
- SHA512 9dac67a1ccfe1921ac355f9e01c619fe5a2be5fb9c35dc6efaa57853a5fc78d0ac9241e2af458539cc27a1a6138e1ba11ab01bf89a0fb7720774efab1823c441
- SSDEEP 24576:ovO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:oHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T1D8759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory