General
- Target 459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd
- Size 525KB
- Sample260810-zzvpysttgw
- SHA256 459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd
- MD5 f2c08cf212aee837a1144132c7b04e7c
- SHA1 bde204c0c88267b5d269d635f5a87ac1ace37d24
- SHA512 9187b23090e883ca359d85a66014d76dc27f645c493e5a4984171cb1a8d02373f8523e9fab5510d2ffade4f66e1e982d74daa2359f812256ac985b9c231f4b88
- SSDEEP 6144:icTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:iSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1BAB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd
- Size 525KB
- SHA256 459153543540feb58ad4188efc8357c1370b1b0a4e0b50a636a5b0db6d9dabdd
- MD5 f2c08cf212aee837a1144132c7b04e7c
- SHA1 bde204c0c88267b5d269d635f5a87ac1ace37d24
- SHA512 9187b23090e883ca359d85a66014d76dc27f645c493e5a4984171cb1a8d02373f8523e9fab5510d2ffade4f66e1e982d74daa2359f812256ac985b9c231f4b88
- SSDEEP 6144:icTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K:iSvO2x9mONvKRwLSFtsOkx2LIa+y
- TLSH T1BAB47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory