General
- Target 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- Size 560KB
- Sample260805-atqrda11av
- SHA256 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- MD5 a40f37af498f5afecc6b57ae3065e58c
- SHA1 3131b90493c460b0784b86e164a69739e5251abd
- SHA512 82d708f691276e65619ca9a2162937434d60d479b8750a6da1ea43c2f3107890d9c5bab254ef4a341c4ba4bfdf233bd001731a16a814d127f16185f35412b289
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:WkCO2zVPX7vf1LKlIsOkxHy
- TLSH T139C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- Size 560KB
- SHA256 8ffea8969eb275cbabf1439b8b90b75a1a3f9c08679105f995b823f52731906a
- MD5 a40f37af498f5afecc6b57ae3065e58c
- SHA1 3131b90493c460b0784b86e164a69739e5251abd
- SHA512 82d708f691276e65619ca9a2162937434d60d479b8750a6da1ea43c2f3107890d9c5bab254ef4a341c4ba4bfdf233bd001731a16a814d127f16185f35412b289
- SSDEEP 6144:WWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:WkCO2zVPX7vf1LKlIsOkxHy
- TLSH T139C47C29B690D076C4779574C4A197AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory