General
- Target c0f0e0b9cc416b5ddc14eed9f1231c92c5d67422d826bccef2aa2f829170a654
- Size 1.1MB
- Sample260813-ccs7aahq2v
- SHA256 c0f0e0b9cc416b5ddc14eed9f1231c92c5d67422d826bccef2aa2f829170a654
- MD5 ff0de8de4e979b59475e0f6d1d381409
- SHA1 b48561c5ba304867b370730ecc9cf155bc9587f8
- SHA512 eb4f3197010661872382c2622e1ef0ea3966f5238e20e3d21ce38391922c449570d6943734a3dcdb1529b5d07ab9f5f7b54b48ad21cbb6d8b62ddda53685a0b3
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:7vO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T10E357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
c0f0e0b9cc416b5ddc14eed9f1231c92c5d67422d826bccef2aa2f829170a654.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c0f0e0b9cc416b5ddc14eed9f1231c92c5d67422d826bccef2aa2f829170a654
- Size 1.1MB
- SHA256 c0f0e0b9cc416b5ddc14eed9f1231c92c5d67422d826bccef2aa2f829170a654
- MD5 ff0de8de4e979b59475e0f6d1d381409
- SHA1 b48561c5ba304867b370730ecc9cf155bc9587f8
- SHA512 eb4f3197010661872382c2622e1ef0ea3966f5238e20e3d21ce38391922c449570d6943734a3dcdb1529b5d07ab9f5f7b54b48ad21cbb6d8b62ddda53685a0b3
- SSDEEP 12288:gSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/LikGU5rCOTeidzN/VTg:7vO2xJKRw2kOkx2LFRvcU6UQOJdM
- TLSH T10E357C31A681C036D5B34571C6FA4BBBA9747D25131165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory