General
- Target df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd
- Size 830KB
- Sample260809-2vyl6acg98
- SHA256 df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd
- MD5 791db78e056ddaf8005af1893c84b32b
- SHA1 2396f529f2f395a4093cb5720598157fc843bee2
- SHA512 e67bcf89b95151edd5e0fa8945bfe7403f6fa59f0ced412110184e301bceff44f75337ac6f510995e2370443b1613fc27ebef03ecab3a2fe685fc29e999dca20
- SSDEEP 12288:VSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:UvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T16C055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd
- Size 830KB
- SHA256 df78135465102758235422a68d68fc92706ec718a890358891148c728bf0b6fd
- MD5 791db78e056ddaf8005af1893c84b32b
- SHA1 2396f529f2f395a4093cb5720598157fc843bee2
- SHA512 e67bcf89b95151edd5e0fa8945bfe7403f6fa59f0ced412110184e301bceff44f75337ac6f510995e2370443b1613fc27ebef03ecab3a2fe685fc29e999dca20
- SSDEEP 12288:VSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3K:UvO2xJKRw2kOkx2LFRvcUQPK
- TLSH T16C055A31E641C03AD0A74575C6FA4BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory