General
- Target 85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408
- Size 395KB
- Sample260804-3ec6ysfq7t
- SHA256 85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408
- MD5 60d150663c3d084ed96716992c43c895
- SHA1 71c6f96537d8e881b30613a3bfceb49f1a24d6d1
- SHA512 a04cbdd3ea6079c0cfb2ff7fb1687199d5b387cec51d7e232346c2a35a4a6b9ab444d13543c4077bc15db1793f956fa1820c3ad053be741321b0e2024d62d244
- SSDEEP 6144:TWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:TkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T104846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408
- Size 395KB
- SHA256 85f1119ed5ce454c12e73be5025b246be66866a59fe06b6ddaf139815c535408
- MD5 60d150663c3d084ed96716992c43c895
- SHA1 71c6f96537d8e881b30613a3bfceb49f1a24d6d1
- SHA512 a04cbdd3ea6079c0cfb2ff7fb1687199d5b387cec51d7e232346c2a35a4a6b9ab444d13543c4077bc15db1793f956fa1820c3ad053be741321b0e2024d62d244
- SSDEEP 6144:TWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:TkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T104846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory