General
- Target d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335
- Size 395KB
- Sample260804-j2gm4sap5y
- SHA256 d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335
- MD5 ef02b6f593bacb59075a05c58b151f15
- SHA1 7af5866031c6cf07dee289430d7ef8677a7c7c8b
- SHA512 e87dbc7f8e820c4242f85362a3050329ef9c26ce60788d15e3f231daea916ad17320b8c3a67b01a34eed7bd915b14136213183c21aed9f672bf9ddaf257ad3e3
- SSDEEP 6144:rWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:rkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1AD846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335
- Size 395KB
- SHA256 d543be83549cfac90b2b98b6bbb88213d5b9fab86ab35ab5b0c395f9bedde335
- MD5 ef02b6f593bacb59075a05c58b151f15
- SHA1 7af5866031c6cf07dee289430d7ef8677a7c7c8b
- SHA512 e87dbc7f8e820c4242f85362a3050329ef9c26ce60788d15e3f231daea916ad17320b8c3a67b01a34eed7bd915b14136213183c21aed9f672bf9ddaf257ad3e3
- SSDEEP 6144:rWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:rkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1AD846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory