General
- Target 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- Size 560KB
- Sample260803-1apyvayamg
- SHA256 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- MD5 1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff
- SHA1 df2a03b086850e513c37d22af9eb4f65030c21dd
- SHA512 0c6269bf24263fd789e8eaa9307d7e14806c18b201dc23ccbc8e82db97d0f646916d7a99ead1284c04239bab03488291dd3fd090d03b66340ce3846c07b80161
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T149C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- Size 560KB
- SHA256 0801161cece2eb58792afa6b778491eb7b034444069443b194b410ff64f3ffb5
- MD5 1c0ecbf47c9b2f4c7aeb4c9d54a5e0ff
- SHA1 df2a03b086850e513c37d22af9eb4f65030c21dd
- SHA512 0c6269bf24263fd789e8eaa9307d7e14806c18b201dc23ccbc8e82db97d0f646916d7a99ead1284c04239bab03488291dd3fd090d03b66340ce3846c07b80161
- SSDEEP 6144:tUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:tYsVOdhElvkCgvDLe4usOkxHy
- TLSH T149C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory