General
- Target f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5
- Size 1.1MB
- Sample260810-14d4favtft
- SHA256 f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5
- MD5 67c5830ba0393e711d075fb63168c9a9
- SHA1 07fa399a0f63ddd5dbe89831e0b2fc6eed63a0eb
- SHA512 a9e59c00784c5f95ef1394f358332f7f998d96c3bd8ae14c761e42ee8f9b98716811712e9e9b00f8658600a148ace698050106937059ca2a1d1081fc0c182d54
- SSDEEP 12288:GSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:lvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1B8357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5
- Size 1.1MB
- SHA256 f9fd7ddb79c2b73ba778d4c688d7948a22854d65d5608c0a85c88272086fd5e5
- MD5 67c5830ba0393e711d075fb63168c9a9
- SHA1 07fa399a0f63ddd5dbe89831e0b2fc6eed63a0eb
- SHA512 a9e59c00784c5f95ef1394f358332f7f998d96c3bd8ae14c761e42ee8f9b98716811712e9e9b00f8658600a148ace698050106937059ca2a1d1081fc0c182d54
- SSDEEP 12288:GSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:lvO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T1B8357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory