General
- Target a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05
- Size 2.1MB
- Sample260807-t2bf7ssvat
- SHA256 a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05
- MD5 3b9b0fd1d9fdb8c383e20ad12d43d4d6
- SHA1 8722d1de5c055b71f190f23777383cd50c56e03d
- SHA512 8567e34cf6d1b5acdf267f261e3d155edf547a8f33427e5760f3e52a89cd70027b3f34f6009ba8cad46b879def95c055f0060e913c9a999a84e4312d14f3e1c6
- SSDEEP 49152:DHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QL:DnKdVkOhCXHHFZMjHfUKkVWL
- TLSH T1FFA57D31A6C18136E1B3867186FA56FAA5247C216311A5CFA3C47A291F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05
- Size 2.1MB
- SHA256 a8f3dd29248ecc7d3baf5a1a951251ce0828d921cbcc12e9c69b054bfa1e0a05
- MD5 3b9b0fd1d9fdb8c383e20ad12d43d4d6
- SHA1 8722d1de5c055b71f190f23777383cd50c56e03d
- SHA512 8567e34cf6d1b5acdf267f261e3d155edf547a8f33427e5760f3e52a89cd70027b3f34f6009ba8cad46b879def95c055f0060e913c9a999a84e4312d14f3e1c6
- SSDEEP 49152:DHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QL:DnKdVkOhCXHHFZMjHfUKkVWL
- TLSH T1FFA57D31A6C18136E1B3867186FA56FAA5247C216311A5CFA3C47A291F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory