General
- Target 3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7
- Size 2.0MB
- Sample260810-egva9a1alf
- SHA256 3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7
- MD5 871ec22e4eb55c15e87de1176f15d055
- SHA1 de09b5417467ac300efd5b2fa2d5bacb01fe2371
- SHA512 8e667ee53facea7a3e7a6a8945b0a2e488f4b7bb62f587f65891c962ebad63e9692bf3f2d77a9f28fb0df56256bb7e0690c945a0aa5863a6e2d031bb62df0e04
- SSDEEP 49152:MHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:MnKdVkOhCXHHFZMjHfUKkVi
- TLSH T15BA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7
- Size 2.0MB
- SHA256 3871dccbf26345d4eedebeefbbd56d7e53548532f257dc7e68c770513730d9b7
- MD5 871ec22e4eb55c15e87de1176f15d055
- SHA1 de09b5417467ac300efd5b2fa2d5bacb01fe2371
- SHA512 8e667ee53facea7a3e7a6a8945b0a2e488f4b7bb62f587f65891c962ebad63e9692bf3f2d77a9f28fb0df56256bb7e0690c945a0aa5863a6e2d031bb62df0e04
- SSDEEP 49152:MHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:MnKdVkOhCXHHFZMjHfUKkVi
- TLSH T15BA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory