General
- Target f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c
- Size 1.3MB
- Sample260809-13fwmswfpd
- SHA256 f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c
- MD5 e08c9e37a1a0708da501fa913911d8c1
- SHA1 37a28aa60d0a459227c324b604b7e9d1d3fdb70d
- SHA512 26ee5e103a65be038bd16495f3dcc91a23e9d94e2b9ae9cab6737229f0321855853e6eeb29b98ef51393ff80641bab5a956419af1c275024e40e5cb5548d3f14
- SSDEEP 24576:nvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:nHHKO29QG56/OJdJCXDrsl
- TLSH T1DA559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c
- Size 1.3MB
- SHA256 f3a4f0ae33eb56ab34d8214d430d0ae4f37ea4b1f575dadb5d19761d0d116c3c
- MD5 e08c9e37a1a0708da501fa913911d8c1
- SHA1 37a28aa60d0a459227c324b604b7e9d1d3fdb70d
- SHA512 26ee5e103a65be038bd16495f3dcc91a23e9d94e2b9ae9cab6737229f0321855853e6eeb29b98ef51393ff80641bab5a956419af1c275024e40e5cb5548d3f14
- SSDEEP 24576:nvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:nHHKO29QG56/OJdJCXDrsl
- TLSH T1DA559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory