General
- Target 4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef
- Size 1.2MB
- Sample260811-xvrrdswxhs
- SHA256 4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef
- MD5 fc6b872d413890acb9fd084f5f1fb894
- SHA1 c974d2f1bb1a0e89e15c90e16224eb66a8676d0f
- SHA512 86624b4d33e6a83ba57e574288ea216712d9e6031df93ea036ec8ac0d9480fdd7b9f2371601f92adb9701ea41da96e0c7378c15adafee8b38f5e3722ffa77a20
- SSDEEP 24576:mvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:mHHKe2WQXhuTtS0rQi
- TLSH T134559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef
- Size 1.2MB
- SHA256 4a778e94aff2933c76e9bcb899400702ddef450603c4a16db8108efc64fe3cef
- MD5 fc6b872d413890acb9fd084f5f1fb894
- SHA1 c974d2f1bb1a0e89e15c90e16224eb66a8676d0f
- SHA512 86624b4d33e6a83ba57e574288ea216712d9e6031df93ea036ec8ac0d9480fdd7b9f2371601f92adb9701ea41da96e0c7378c15adafee8b38f5e3722ffa77a20
- SSDEEP 24576:mvO2xJKRw2kOkx2LFRvhuZ98Es8k3OH3C0rQ6+y:mHHKe2WQXhuTtS0rQi
- TLSH T134559E31E641C036D4A70176C6B94BBFA578BD22072555CBE3D43A6A2F722D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory