General
- Target a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17
- Size 560KB
- Sample260807-w8tmgahe96
- SHA256 a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17
- MD5 9b2b4f138dcdc1310667efdade09452f
- SHA1 14a0d21c5fc78ea113b8a7fcba42b7175405035b
- SHA512 7dfbb7763d10cd7682196624c7ed280dda34b6a0003318c50a88c87e6fff842eae3c6ab5db82fd00b2e4164ee5d8d72b71fec1017d34aa16b9f0f013ec00c1be
- SSDEEP 6144:+6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:+O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T109C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17
- Size 560KB
- SHA256 a0d4adbd5d333d20dae57ea2e59d5c565bf3c091495729f5e9286b7a52316f17
- MD5 9b2b4f138dcdc1310667efdade09452f
- SHA1 14a0d21c5fc78ea113b8a7fcba42b7175405035b
- SHA512 7dfbb7763d10cd7682196624c7ed280dda34b6a0003318c50a88c87e6fff842eae3c6ab5db82fd00b2e4164ee5d8d72b71fec1017d34aa16b9f0f013ec00c1be
- SSDEEP 6144:+6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:+O7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T109C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory