General
- Target 8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91
- Size 560KB
- Sample260815-x5evksselh
- SHA256 8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91
- MD5 ab1254a79c310527828e25b5c51b5b9b
- SHA1 fa4338a7cb6ff7f48b7050b6c48dc5057db17755
- SHA512 21b2ab1f3955882dc5815330f2221719db29da7ae6dc47251593fae03cf3c144e59060f95c30c05644bcbcf8d4b1e2b1b2f21a92767ad93d221f402e52162d10
- SSDEEP 12288:v3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:NVOL4/gPXKCOkx2LFR
- TLSH T1CCC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91
- Size 560KB
- SHA256 8ea92bcbef64efd869f9f53ecd43ccdbd9fd474303e92da632795d9bbae56d91
- MD5 ab1254a79c310527828e25b5c51b5b9b
- SHA1 fa4338a7cb6ff7f48b7050b6c48dc5057db17755
- SHA512 21b2ab1f3955882dc5815330f2221719db29da7ae6dc47251593fae03cf3c144e59060f95c30c05644bcbcf8d4b1e2b1b2f21a92767ad93d221f402e52162d10
- SSDEEP 12288:v3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:NVOL4/gPXKCOkx2LFR
- TLSH T1CCC46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory