General
- Target 1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83
- Size 761KB
- Sample260802-xxybyseq81
- SHA256 1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83
- MD5 5ff824144a630b81a71fe59ae814e499
- SHA1 a1d60fdf48a703b23e0a0e2d83caa712d1a80742
- SHA512 0295ba8c3e0c29ef564993b8ecc588d927272240e29bb6ec255bb3e5c3351a3146905e30209511c0c59538d7737d5ff6690e7ee79ead919b4408e8de4b26d98d
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:pvO2xJKRw2kOkxSkW298B
- TLSH T169F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83
- Size 761KB
- SHA256 1f821bc6afecfff0f15dfe7cdf0c3952c37f7963218578a02f40f7e179cfda83
- MD5 5ff824144a630b81a71fe59ae814e499
- SHA1 a1d60fdf48a703b23e0a0e2d83caa712d1a80742
- SHA512 0295ba8c3e0c29ef564993b8ecc588d927272240e29bb6ec255bb3e5c3351a3146905e30209511c0c59538d7737d5ff6690e7ee79ead919b4408e8de4b26d98d
- SSDEEP 12288:iSvO2x9mONvKRwLSFtsOkxHya5hYIW0p98B:pvO2xJKRw2kOkxSkW298B
- TLSH T169F49E35A2808036C0B34532C6F94AABF9797D35631565CBA3843B662F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory