General
- Target 3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429
- Size 640KB
- Sample260808-3ttggszyhs
- SHA256 3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429
- MD5 7c8822281d8cae2a3643624f793f58aa
- SHA1 8d339a9bb0e5c0b8bee9de902eb858f0bcf6ce5c
- SHA512 42ddd44d07d1347d2a4850ead6d26e8f2c9a6c33ddf946615537eac9a48d3a6520d03a90c63bae1013a1b7986a55775c3b4a4bbe743757b2819f614607439eb8
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T17AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429
- Size 640KB
- SHA256 3085d5d43d29096d7fe9ac4c47568ac27d158085545afa713cda82d716bc9429
- MD5 7c8822281d8cae2a3643624f793f58aa
- SHA1 8d339a9bb0e5c0b8bee9de902eb858f0bcf6ce5c
- SHA512 42ddd44d07d1347d2a4850ead6d26e8f2c9a6c33ddf946615537eac9a48d3a6520d03a90c63bae1013a1b7986a55775c3b4a4bbe743757b2819f614607439eb8
- SSDEEP 6144:qcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:qSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T17AD45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory