General
- Target 222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3
- Size 871KB
- Sample260810-1hxcwsag56
- SHA256 222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3
- MD5 8e1225f0a3979ca3b1555eb51ba13143
- SHA1 5992cec1d7dc025c982f57fe955617ddd9213d4e
- SHA512 59b66d06ba15f51c1fc6e037b6ede364706cdb875893447964e59d11bb0b34e2cbe2b1b7beb468957602a4e7c904f21f055239db0d034403093107f9247ed604
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:1vO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T194156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3
- Size 871KB
- SHA256 222ab6cf04f8f63064c75161d32d9865c743dcf20c6cdc7de0c1fe5ab771c0f3
- MD5 8e1225f0a3979ca3b1555eb51ba13143
- SHA1 5992cec1d7dc025c982f57fe955617ddd9213d4e
- SHA512 59b66d06ba15f51c1fc6e037b6ede364706cdb875893447964e59d11bb0b34e2cbe2b1b7beb468957602a4e7c904f21f055239db0d034403093107f9247ed604
- SSDEEP 12288:2SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:1vO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T194156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory