General
- Target 8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c
- Size 560KB
- Sample260810-zrenrsyblh
- SHA256 8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c
- MD5 e9d6d9120879549b4533e5850474992a
- SHA1 25c8583868b6f27ce83b2d954eb2ebda574e2f44
- SHA512 d42cb16eed4bbfd7fc00b786ec758ac6f6505db2c76b2c20d4c20b81c917147c2b6fa6158882798fc2f38f64441e8bcfe888bf587f14ed3b2213d465a1c3b602
- SSDEEP 6144:iUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:iYsVOdhElvkCgvDLe4usOkxHy
- TLSH T180C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c
- Size 560KB
- SHA256 8f7a4f93ea26cc867e1d5732073e5275a75a6c9870bed42bb3dd30cb769e764c
- MD5 e9d6d9120879549b4533e5850474992a
- SHA1 25c8583868b6f27ce83b2d954eb2ebda574e2f44
- SHA512 d42cb16eed4bbfd7fc00b786ec758ac6f6505db2c76b2c20d4c20b81c917147c2b6fa6158882798fc2f38f64441e8bcfe888bf587f14ed3b2213d465a1c3b602
- SSDEEP 6144:iUJJuV1cdhIoA7vJ0CLoCgvDLe4AmFvirGcEOkCybEaQRuy8K:iYsVOdhElvkCgvDLe4usOkxHy
- TLSH T180C48D29B6D0C036C5B39574C4A186BAEAB17432372549CFA3D5475A0F337E2BA7930E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory