General
- Target f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a
- Size 374KB
- Sample260807-w6vrraar3v
- SHA256 f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a
- MD5 656c11e5f2270c398cc1b441121295ef
- SHA1 80b44ea725c2cc3108868541a73c21481c2d7c80
- SHA512 d0d8c3661e1293ab620a548de82747106ba94e5f4127d75b835da21b977bf09932e0598924ee5823966bdcab9d1369dd9088804498b146c099f659622f7a6f50
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:eSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T1BD846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a
- Size 374KB
- SHA256 f2a4fd6b616c9c75e1c6cf9f0fc64e97d98814c53bf7706f68078db1c1c00c8a
- MD5 656c11e5f2270c398cc1b441121295ef
- SHA1 80b44ea725c2cc3108868541a73c21481c2d7c80
- SHA512 d0d8c3661e1293ab620a548de82747106ba94e5f4127d75b835da21b977bf09932e0598924ee5823966bdcab9d1369dd9088804498b146c099f659622f7a6f50
- SSDEEP 6144:ecTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:eSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T1BD846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory