General
- Target 3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea
- Size 419KB
- Sample260809-1n7e2sweke
- SHA256 3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea
- MD5 df72f0f84c0efb6f2c0f10befacea545
- SHA1 065d07cd258d39b058fbfd80992c9e302859b1ea
- SHA512 f5cb4a26fd07fa3c7fa992e7c54de9f172d9335ede6ce561c39a8d8c9e3c929b52af9414175eb55f30074c62c76f30cd4412f4275d667ef531802b3d4abd98c1
- SSDEEP 6144:oatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:oatG+S9+kaTDHrOkx2LIa
- TLSH T106948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea
- Size 419KB
- SHA256 3aa5cb0c437d2137deb9ad2a223629ebdcddb708bd6fd8a6bd6cbe2c03229bea
- MD5 df72f0f84c0efb6f2c0f10befacea545
- SHA1 065d07cd258d39b058fbfd80992c9e302859b1ea
- SHA512 f5cb4a26fd07fa3c7fa992e7c54de9f172d9335ede6ce561c39a8d8c9e3c929b52af9414175eb55f30074c62c76f30cd4412f4275d667ef531802b3d4abd98c1
- SSDEEP 6144:oatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:oatG+S9+kaTDHrOkx2LIa
- TLSH T106948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory