General
- Target cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc
- Size 1.9MB
- Sample260809-zlvsssdm4v
- SHA256 cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc
- MD5 85d918adb73033300ca672f4ba6cc253
- SHA1 89ba10e895f8ea1cd2b64f153d726a10d97955f6
- SHA512 9bd2adf855839a780c14e91c7d02bec77b59609593dd33569b002f4a087f9d892a7c3c534cc8b444e7ce8a8862c2db0d477c69ffa4baf7afcbafea1d770082d4
- SSDEEP 49152:3HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmT4:3nKdBWsM0r1Qn1K4XM
- TLSH T13D95AF21F351C036D4AB01758ABA47AEA578BD21472551CBB3C47A7E5FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc
- Size 1.9MB
- SHA256 cfb9e75516e9454b25353ea80dbe922ca9a2e27ff434b6dea96b7e2a87f31dbc
- MD5 85d918adb73033300ca672f4ba6cc253
- SHA1 89ba10e895f8ea1cd2b64f153d726a10d97955f6
- SHA512 9bd2adf855839a780c14e91c7d02bec77b59609593dd33569b002f4a087f9d892a7c3c534cc8b444e7ce8a8862c2db0d477c69ffa4baf7afcbafea1d770082d4
- SSDEEP 49152:3HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmT4:3nKdBWsM0r1Qn1K4XM
- TLSH T13D95AF21F351C036D4AB01758ABA47AEA578BD21472551CBB3C47A7E5FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory