General
- Target b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74
- Size 873KB
- Sample260813-sraw9asshv
- SHA256 b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74
- MD5 468bd5b0599748ee5b6f9a74f98a037f
- SHA1 4183514411a16d7cd1b1fc9394e51965a499d2cb
- SHA512 17f6dd94ed1ea49068f618fbcdf66ac98f100c1a5e1e3d4fd48fdbb8b3c2472bdfaccf2eb08a69821a49eebe2796c092f25dfb77c450a16fab7530be84dca3fb
- SSDEEP 12288:1SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:0vO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T1C2156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74
- Size 873KB
- SHA256 b65c62d53b6a553751c262f378c7c07947968e27b6f1acc7cdb6b33b2b7b1f74
- MD5 468bd5b0599748ee5b6f9a74f98a037f
- SHA1 4183514411a16d7cd1b1fc9394e51965a499d2cb
- SHA512 17f6dd94ed1ea49068f618fbcdf66ac98f100c1a5e1e3d4fd48fdbb8b3c2472bdfaccf2eb08a69821a49eebe2796c092f25dfb77c450a16fab7530be84dca3fb
- SSDEEP 12288:1SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Lik8CQ3uEW:0vO2xJKRw2kOkx2LFRvcUQPxW
- TLSH T1C2156B31E641C036D0A34576C6FA4BBFE964BD25531165CBA3D43A262FB32D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory