General
- Target a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6
- Size 576KB
- Sample260810-2dfd9avwhv
- SHA256 a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6
- MD5 879b4d9a65fc04d7f16573ce2fd7d94d
- SHA1 e3a21576afd5d55e294d382bccfa49c4422f64e9
- SHA512 17ef59d105e387cb6f1ced3cf32a3416a034814faf9ed09f4efd4743c85eea50e23e9e1059bff90ebe5741b854f3c836498182fc82262d92298df8a6af6bc574
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:uSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T100C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6
- Size 576KB
- SHA256 a5e93f61e1ee9e4ecf0a582eb58568ccb1ab3f369c6b37ada2a98bdc0fa54dd6
- MD5 879b4d9a65fc04d7f16573ce2fd7d94d
- SHA1 e3a21576afd5d55e294d382bccfa49c4422f64e9
- SHA512 17ef59d105e387cb6f1ced3cf32a3416a034814faf9ed09f4efd4743c85eea50e23e9e1059bff90ebe5741b854f3c836498182fc82262d92298df8a6af6bc574
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:uSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T100C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory