General
- Target 3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52
- Size 560KB
- Sample260815-afa4rsvyft
- SHA256 3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52
- MD5 ef3037f59edbc02227d8b4bb76061c2b
- SHA1 d940c7419a27e517848f8f7d7c3454af0cbf59c2
- SHA512 8228d93aed5434006e3828addad926f7e2970e883f5f5546ff89e94aeef209de36b3920ee763dac879817e54e92159435195aef7f9695c51c72c5d282947edc8
- SSDEEP 6144:UWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:UkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1D4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52
- Size 560KB
- SHA256 3a16e33ff6e57d817c37f2cd67b6c70c48326faacce5f7ec955cc62bcd858c52
- MD5 ef3037f59edbc02227d8b4bb76061c2b
- SHA1 d940c7419a27e517848f8f7d7c3454af0cbf59c2
- SHA512 8228d93aed5434006e3828addad926f7e2970e883f5f5546ff89e94aeef209de36b3920ee763dac879817e54e92159435195aef7f9695c51c72c5d282947edc8
- SSDEEP 6144:UWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRXr9HNdvOa+y8K:UkCO2zVPX7vf1LKlIsOkx2LIa+y
- TLSH T1D4C47C2AF6A0C036C4779574C4A257AAFFB1B42127204ACFA390475A1F637E2BE7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory