General
- Target 3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0
- Size 1024KB
- Sample260809-r834pazfkh
- SHA256 3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0
- MD5 c48ab44448831c02232ad18df505168f
- SHA1 fb05d1b141d1029ef57a1c642aed6edb17a1c019
- SHA512 f92a57152609d53948829cdc9c6e8c3d3714d3b667897ead5a25403b2278166a2243b7e6f18aafabaaaaecdd3a84fdc2a7248965139271e65093a56de473409a
- SSDEEP 24576:ojHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:oTGkQyhuTtS0rQi
- TLSH T1E225AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0
- Size 1024KB
- SHA256 3e1ebe8e43bf414a879a00abcbd97070e2241c98a0b740534a39e8052092dbc0
- MD5 c48ab44448831c02232ad18df505168f
- SHA1 fb05d1b141d1029ef57a1c642aed6edb17a1c019
- SHA512 f92a57152609d53948829cdc9c6e8c3d3714d3b667897ead5a25403b2278166a2243b7e6f18aafabaaaaecdd3a84fdc2a7248965139271e65093a56de473409a
- SSDEEP 24576:ojHPOSOkx2LFshuZ98Es8k3OH3C0rQ6+y:oTGkQyhuTtS0rQi
- TLSH T1E225AF31E242C03AD5A70172C6BE0BAF95787D25472951C7A3D43D6A2FB22D2AE3570F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory