General
- Target 2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88
- Size 374KB
- Sample260809-xf6l1aterb
- SHA256 2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88
- MD5 558d5e5497ad2ea7172be4289d985d02
- SHA1 63ad2c4203abad1ca65e2ab633616a2360737f81
- SHA512 3ca7c3bb5845a6396531c008415e2919216f0d0eeadb5a851bf3deff24b2516ab3717e228ed79a7fa3fc4b6aaea23aec9291468d68557725c45785ed71f3c5f1
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8K:hSvO2x9mONvKRILSFnOkx2LIaxy
- TLSH T156846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88
- Size 374KB
- SHA256 2891434043108407013efa25df030cc724c35f34c4722c507d19fa2a6b1f0b88
- MD5 558d5e5497ad2ea7172be4289d985d02
- SHA1 63ad2c4203abad1ca65e2ab633616a2360737f81
- SHA512 3ca7c3bb5845a6396531c008415e2919216f0d0eeadb5a851bf3deff24b2516ab3717e228ed79a7fa3fc4b6aaea23aec9291468d68557725c45785ed71f3c5f1
- SSDEEP 6144:hcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8K:hSvO2x9mONvKRILSFnOkx2LIaxy
- TLSH T156846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory