General
- Target 7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109
- Size 832KB
- Sample260808-wfrmeasarb
- SHA256 7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109
- MD5 980bd4b4eddfa7fa45758e977a614dac
- SHA1 b651149e2b5b6b83645af32aeb63866510137d9c
- SHA512 7e3c0cb695877b96d9b36b368a8d73b5c8b2e5307d5f3715ae69e84ccb375e6281de99d992159c92e7664cc31a700cbdd6616297a6e0c9e775b2147c09d9c9c4
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:FvO2xJKRI2FOkx2LFEAcUY
- TLSH T1C2056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109
- Size 832KB
- SHA256 7e1b6506cc3561c73dc4b483351b1c9a84471db1203bb9c84165e21accdca109
- MD5 980bd4b4eddfa7fa45758e977a614dac
- SHA1 b651149e2b5b6b83645af32aeb63866510137d9c
- SHA512 7e3c0cb695877b96d9b36b368a8d73b5c8b2e5307d5f3715ae69e84ccb375e6281de99d992159c92e7664cc31a700cbdd6616297a6e0c9e775b2147c09d9c9c4
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:FvO2xJKRI2FOkx2LFEAcUY
- TLSH T1C2056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory