General
- Target b4e27a71166d4d0759e20d52cfdd95bb4d42a53654444c8853f0da2a18a8c815
- Size 1024KB
- Sample260807-1kd94aab66
- SHA256 b4e27a71166d4d0759e20d52cfdd95bb4d42a53654444c8853f0da2a18a8c815
- MD5 38ab6358a8d7ae7d51da8b02538877ee
- SHA1 b90abe43f6d86649935ae1814056098604c06e89
- SHA512 ea91af69d1bef5dc2d1c139b6309173ef707cc479ab54e78be0926e579f61724cbda7e7134151198b392cf7be32aa06dfc18c8cb719bd0a9829b1f9cb52f9f75
- SSDEEP 12288:RSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidH:4vO2xJKRw2kOkx2LFRvcU6UQOJdH
- TLSH T176256C31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
b4e27a71166d4d0759e20d52cfdd95bb4d42a53654444c8853f0da2a18a8c815.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b4e27a71166d4d0759e20d52cfdd95bb4d42a53654444c8853f0da2a18a8c815
- Size 1024KB
- SHA256 b4e27a71166d4d0759e20d52cfdd95bb4d42a53654444c8853f0da2a18a8c815
- MD5 38ab6358a8d7ae7d51da8b02538877ee
- SHA1 b90abe43f6d86649935ae1814056098604c06e89
- SHA512 ea91af69d1bef5dc2d1c139b6309173ef707cc479ab54e78be0926e579f61724cbda7e7134151198b392cf7be32aa06dfc18c8cb719bd0a9829b1f9cb52f9f75
- SSDEEP 12288:RSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidH:4vO2xJKRw2kOkx2LFRvcU6UQOJdH
- TLSH T176256C31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory