General
- Target a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b
- Size 2.4MB
- Sample260815-be22jawycs
- SHA256 a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b
- MD5 5e8398bf5ad5ecdfa3e2f5529c8dc8f8
- SHA1 c201e6cc5a34c9889263cffa982df5f40b5ad49c
- SHA512 99e2747830e9d7eba96eefd47c04f3dfc5530c8f114e355606992738038e44b415f0342e44532847324516cc266dae13c9ff6e4f5990b7bde9f50020483bb55a
- SSDEEP 49152:UHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:UnKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T1C6B58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b
- Size 2.4MB
- SHA256 a71a5a8ef4d09738f2a84a6781d276894aeec8b732293f47d1e0f076e85a729b
- MD5 5e8398bf5ad5ecdfa3e2f5529c8dc8f8
- SHA1 c201e6cc5a34c9889263cffa982df5f40b5ad49c
- SHA512 99e2747830e9d7eba96eefd47c04f3dfc5530c8f114e355606992738038e44b415f0342e44532847324516cc266dae13c9ff6e4f5990b7bde9f50020483bb55a
- SSDEEP 49152:UHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtg:UnKdVkOhCXHHFZMjHfUKkVWsi
- TLSH T1C6B58E31E6818136D1B34671C6FA57BBA5287C221711A5CFA3C47A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory