General
- Target 04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88
- Size 560KB
- Sample260805-mcghlavfkc
- SHA256 04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88
- MD5 7503a2c17d8e99d91e5e0f645f7ff242
- SHA1 086c2db30b3171badd86ed229725b7238b6c4659
- SHA512 9e630ba44ddfd396a4da869748294a912c932fc79b1e720304e2ce1447cd1596750adfcecf3300810c55304df20b7e0ae7787bc301e5a0ee35a8776164b5167a
- SSDEEP 12288:n3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:1VOL4/gPXKCOkx2LFR
- TLSH T18EC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88
- Size 560KB
- SHA256 04f477fb054b64b1c724033497ca05302142dd3d244221f2762f371bd415aa88
- MD5 7503a2c17d8e99d91e5e0f645f7ff242
- SHA1 086c2db30b3171badd86ed229725b7238b6c4659
- SHA512 9e630ba44ddfd396a4da869748294a912c932fc79b1e720304e2ce1447cd1596750adfcecf3300810c55304df20b7e0ae7787bc301e5a0ee35a8776164b5167a
- SSDEEP 12288:n3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:1VOL4/gPXKCOkx2LFR
- TLSH T18EC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory