General
- Target bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2
- Size 1.6MB
- Sample260803-1cs4aa1wdw
- SHA256 bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2
- MD5 d2078e0c98230a1cd118ef2bfb754230
- SHA1 6c83f62d79bb5497a7fc1c61485e5e7632807504
- SHA512 ec3851460e6551957386647e99ae46f353e974913fecc964878d81b1e9f40cacc578e84ea6a58a1cae5894928288b3a949e05376f1b02fe293ad82921ac4e26b
- SSDEEP 24576:/vO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:/HHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T132759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2
- Size 1.6MB
- SHA256 bab4941122b10d8070032f08da19f32b43b3b63958eabc0fa95bee61e39a82f2
- MD5 d2078e0c98230a1cd118ef2bfb754230
- SHA1 6c83f62d79bb5497a7fc1c61485e5e7632807504
- SHA512 ec3851460e6551957386647e99ae46f353e974913fecc964878d81b1e9f40cacc578e84ea6a58a1cae5894928288b3a949e05376f1b02fe293ad82921ac4e26b
- SSDEEP 24576:/vO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:/HHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T132759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory