General
- Target ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f
- Size 2.0MB
- Sample260813-aearlsxcre
- SHA256 ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f
- MD5 ebbb16af4a18bb726b5874c2f08cadd6
- SHA1 eea8ba12cdc879a0ddd8ab4e3b91c0efb1211923
- SHA512 1bd77f1b1ca685a2e6c4b7013308e2545191687506c1b9464975a2e1865f58916b556bf033463cd7858a9850d6f4e85a31cbf2e65cc06e1537762faa836a0d34
- SSDEEP 49152:UHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:UnKdVkOhCXHHFZMjHfUKkVi
- TLSH T11AA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f
- Size 2.0MB
- SHA256 ae9e6ca0b5131a3d08655518c7b4aa0f1e4d32fa47dc4f999df7cf90ba98890f
- MD5 ebbb16af4a18bb726b5874c2f08cadd6
- SHA1 eea8ba12cdc879a0ddd8ab4e3b91c0efb1211923
- SHA512 1bd77f1b1ca685a2e6c4b7013308e2545191687506c1b9464975a2e1865f58916b556bf033463cd7858a9850d6f4e85a31cbf2e65cc06e1537762faa836a0d34
- SSDEEP 49152:UHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:UnKdVkOhCXHHFZMjHfUKkVi
- TLSH T11AA57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory