General
- Target 5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d
- Size 3.3MB
- Sample260804-h1vynsfa72
- SHA256 5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d
- MD5 7e183b2e821157382a07c626eecd78e4
- SHA1 19d515f65f9cfb879f365d1eb02e8739df5a27fa
- SHA512 ffe0ca85cac8d3d9361ff9dc7d1474674043120897f424cc60f00b52f5db5b4edd88900afe9334a24f0b2188e6045ab0056121d53c809811cf0b097d839e6ccb
- SSDEEP 24576:+vO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:+HHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T178F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d
- Size 3.3MB
- SHA256 5d19526ea52b107db1a63c35cc4769dc9890239168a0a339f815a06d1fc9b41d
- MD5 7e183b2e821157382a07c626eecd78e4
- SHA1 19d515f65f9cfb879f365d1eb02e8739df5a27fa
- SHA512 ffe0ca85cac8d3d9361ff9dc7d1474674043120897f424cc60f00b52f5db5b4edd88900afe9334a24f0b2188e6045ab0056121d53c809811cf0b097d839e6ccb
- SSDEEP 24576:+vO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:+HHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T178F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory