General
- Target f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244
- Size 511KB
- Sample260809-2rk7nazyaw
- SHA256 f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244
- MD5 e056989b6043109de5f50be8afdaf38f
- SHA1 31211815664709495b94004ff9cad4beacc157a2
- SHA512 c69df4ddf160997f22240bddd33489331ec6fa75d94f6bc077a5e4dfb89f509f9d5815f4c16de9a04cd29473736510b9dd757993e5c5c88e8f26997911d8e20b
- SSDEEP 6144:EcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ESvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D5B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244
- Size 511KB
- SHA256 f2d27f97392d7f908c6bdc8cddcef416551c4f646d55011f0b0e35ad747a1244
- MD5 e056989b6043109de5f50be8afdaf38f
- SHA1 31211815664709495b94004ff9cad4beacc157a2
- SHA512 c69df4ddf160997f22240bddd33489331ec6fa75d94f6bc077a5e4dfb89f509f9d5815f4c16de9a04cd29473736510b9dd757993e5c5c88e8f26997911d8e20b
- SSDEEP 6144:EcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:ESvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D5B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory