General
- Target de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd
- Size 615KB
- Sample260810-17ppcaap9w
- SHA256 de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd
- MD5 92272b8cea1027648450180da37a3e69
- SHA1 8cc7477c48045f021facbe04de1669aa51350983
- SHA512 2c29b1c4c04fb19e2d00f09504a72e615adf30c7a9e7cb0b314b22b2a442438ed3adcdded5f0f4e51f0696d3fc3fa697fb15ded181409e06aa0492b36a78129c
- SSDEEP 12288:nSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:SvO2xJKRI2FOkx2LFicUV
- TLSH T162D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd
- Size 615KB
- SHA256 de3a54d4a30f9668e1e42cb94a06b97dbad169b63bd4e13c20063926cb2be2cd
- MD5 92272b8cea1027648450180da37a3e69
- SHA1 8cc7477c48045f021facbe04de1669aa51350983
- SHA512 2c29b1c4c04fb19e2d00f09504a72e615adf30c7a9e7cb0b314b22b2a442438ed3adcdded5f0f4e51f0696d3fc3fa697fb15ded181409e06aa0492b36a78129c
- SSDEEP 12288:nSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:SvO2xJKRI2FOkx2LFicUV
- TLSH T162D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory