General
- Target 310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d
- Size 1.6MB
- Sample260810-1heg3styfy
- SHA256 310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d
- MD5 6ac5003670ddf69cd6bc31ca451a693a
- SHA1 eb9c611c77b117251a480501d0d828913b8a2e95
- SHA512 e2de4a42b2c8ee9488fe9965d07a76734b4ed85c5aded7eee556ce9734c6c90b95a07bb826a4456bd3ec7394f4c14093cab44459c33b37ad4a2917effcb656f4
- SSDEEP 24576:GvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:GHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T1AB759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d
- Size 1.6MB
- SHA256 310245d736ea11c236496a2386c555cfa78e3723606cc619ba99cf42352d0e7d
- MD5 6ac5003670ddf69cd6bc31ca451a693a
- SHA1 eb9c611c77b117251a480501d0d828913b8a2e95
- SHA512 e2de4a42b2c8ee9488fe9965d07a76734b4ed85c5aded7eee556ce9734c6c90b95a07bb826a4456bd3ec7394f4c14093cab44459c33b37ad4a2917effcb656f4
- SSDEEP 24576:GvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjHG:GHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTGJ
- TLSH T1AB759E21B351C036D4AB01758AB98BAEA578BD710B2551C7B3C47B7E5FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory