General
- Target 012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41
- Size 395KB
- Sample260805-zespvs1vfx
- SHA256 012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41
- MD5 b1a14076959ea4b488a75e1b3dc2572e
- SHA1 86f7cb7500adc997cb7b8cf66c7a6c0d32e1ba02
- SHA512 16714f5698ec6a40031e4adb709f581b3e35f25531873f1b2c0de840e97d265f90963d608697a594113c6f6f2080e41d37049e70a73ef0b849ba68c91f0dce84
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:pVOL4/gPnKHOkx2LFE
- TLSH T1F5845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41
- Size 395KB
- SHA256 012d297d4f72fb78ab1131182be1c5457092c73012c83870fc3aa5f0ca8bbc41
- MD5 b1a14076959ea4b488a75e1b3dc2572e
- SHA1 86f7cb7500adc997cb7b8cf66c7a6c0d32e1ba02
- SHA512 16714f5698ec6a40031e4adb709f581b3e35f25531873f1b2c0de840e97d265f90963d608697a594113c6f6f2080e41d37049e70a73ef0b849ba68c91f0dce84
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:pVOL4/gPnKHOkx2LFE
- TLSH T1F5845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory