General
- Target 4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c
- Size 1.6MB
- Sample260813-dhc8pazgmg
- SHA256 4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c
- MD5 821a297bba0b8373569073730548ea8c
- SHA1 bb13c30980fed3d1817956b637f894c079a0c409
- SHA512 076f68026d22d105a0e180427013ae3d876d37263d806ae35a4f667584f75d2bb40c02f8e91b816e510bea2b388658e6e892058a84ec5fa21f9e61da890d483e
- SSDEEP 24576:mvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:mHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T14A759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c
- Size 1.6MB
- SHA256 4593ee585ca380e5c0c3c3332f5f16bb062a588ceea709ecf432123fbee6fa4c
- MD5 821a297bba0b8373569073730548ea8c
- SHA1 bb13c30980fed3d1817956b637f894c079a0c409
- SHA512 076f68026d22d105a0e180427013ae3d876d37263d806ae35a4f667584f75d2bb40c02f8e91b816e510bea2b388658e6e892058a84ec5fa21f9e61da890d483e
- SSDEEP 24576:mvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:mHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T14A759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory