General
- Target 4fb892b9f391e6d2e07c38a00d9366bdbc89f8dee71c35b7b42b1103a2ab3271
- Size 2.9MB
- Sample260809-vddr4abd98
- SHA256 4fb892b9f391e6d2e07c38a00d9366bdbc89f8dee71c35b7b42b1103a2ab3271
- MD5 f00c3fcde2330f0d5b8b0d97d1cfbcbc
- SHA1 fa446ccc61bc7347417db09989a8a4b36093c76a
- SHA512 4f958ec95b5e9723ceed65fe0cc56b1d9c94b450bbeaced8703d9e5fe5b137cf57751dbf762361481e5e6af6a5546fa6c3f9ff089542dc3799fe536f1330d0f1
- SSDEEP 49152:OHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:OnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1DBD59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
4fb892b9f391e6d2e07c38a00d9366bdbc89f8dee71c35b7b42b1103a2ab3271.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 4fb892b9f391e6d2e07c38a00d9366bdbc89f8dee71c35b7b42b1103a2ab3271
- Size 2.9MB
- SHA256 4fb892b9f391e6d2e07c38a00d9366bdbc89f8dee71c35b7b42b1103a2ab3271
- MD5 f00c3fcde2330f0d5b8b0d97d1cfbcbc
- SHA1 fa446ccc61bc7347417db09989a8a4b36093c76a
- SHA512 4f958ec95b5e9723ceed65fe0cc56b1d9c94b450bbeaced8703d9e5fe5b137cf57751dbf762361481e5e6af6a5546fa6c3f9ff089542dc3799fe536f1330d0f1
- SSDEEP 49152:OHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:OnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1DBD59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory