General
- Target faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec
- Size 395KB
- Sample260807-ftstmagl3y
- SHA256 faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec
- MD5 2d7a0a295e2a61d38d8570d4816d5335
- SHA1 b16111d0e008d7c1455b1e8adcac66ad3a107740
- SHA512 543d23656ec4be825a65079205cf53bf4e3ffb4ebadf9dd7268ae50fdaf451346e31971d96ce5e97260b7ff446c92a5baca9169a24800bdd2893de2894ba2087
- SSDEEP 6144:VcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:VCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T13A846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec
- Size 395KB
- SHA256 faea102750e24dedfc21ffe38b8d05419ef0035449880e236b0d2041c243faec
- MD5 2d7a0a295e2a61d38d8570d4816d5335
- SHA1 b16111d0e008d7c1455b1e8adcac66ad3a107740
- SHA512 543d23656ec4be825a65079205cf53bf4e3ffb4ebadf9dd7268ae50fdaf451346e31971d96ce5e97260b7ff446c92a5baca9169a24800bdd2893de2894ba2087
- SSDEEP 6144:VcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:VCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T13A846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory