General
- Target 4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45
- Size 419KB
- Sample260804-j1dj3azwey
- SHA256 4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45
- MD5 0ae394c6e30b5846ad36c8fe20fa1d08
- SHA1 bd561db53b6658cbb04c0f51a039a55a553a0b28
- SHA512 a9300b57dd98d3518946b8a2d1f4a60de1934b55ba5e8b3367a5db0464a334b38edee57afa0724015ccc5d60dfcc932b8e381c823e3ec529ba4c3fe8704c6766
- SSDEEP 6144:k8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ja+4EZe/uwqDvDOkx2LIa
- TLSH T13A948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45
- Size 419KB
- SHA256 4e18dd74e3562cbc8a5fd2b72ce0c9dcb3909eb90701ca942d629175f8eadc45
- MD5 0ae394c6e30b5846ad36c8fe20fa1d08
- SHA1 bd561db53b6658cbb04c0f51a039a55a553a0b28
- SHA512 a9300b57dd98d3518946b8a2d1f4a60de1934b55ba5e8b3367a5db0464a334b38edee57afa0724015ccc5d60dfcc932b8e381c823e3ec529ba4c3fe8704c6766
- SSDEEP 6144:k8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:Ja+4EZe/uwqDvDOkx2LIa
- TLSH T13A948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory