General
- Target a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353
- Size 419KB
- Sample260813-3zce6a1ckf
- SHA256 a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353
- MD5 8c99e4eb96c468c2174ad3c5e7a1fa18
- SHA1 a0d325e785d875cb560c931583df41930738c833
- SHA512 a5c3719d31a6aff06002887aa3e582a0bb7dcc6c93c7f01ce966f5ee9a89d992f594b1bb634c6b200444c6acaa8761ee6c217f92d46e39868286702d0b910030
- SSDEEP 6144:IatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:IatG+S9+kaTDHrOkx2LIa
- TLSH T15A948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353
- Size 419KB
- SHA256 a138f2f7d45031f6b2032372565ff6f0e78e24d20c2ee5464743738f70845353
- MD5 8c99e4eb96c468c2174ad3c5e7a1fa18
- SHA1 a0d325e785d875cb560c931583df41930738c833
- SHA512 a5c3719d31a6aff06002887aa3e582a0bb7dcc6c93c7f01ce966f5ee9a89d992f594b1bb634c6b200444c6acaa8761ee6c217f92d46e39868286702d0b910030
- SSDEEP 6144:IatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:IatG+S9+kaTDHrOkx2LIa
- TLSH T15A948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory