General
- Target 3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f
- Size 2.5MB
- Sample260815-ybf18asfkb
- SHA256 3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f
- MD5 ca27c3621b51addc9bd387d61976056d
- SHA1 39edfe0abd78acb898d111221868e720b05d07bb
- SHA512 20c46b2320ba4ee6ff4401b3cd403d7227b14f7aca78d0f7c4a07f309e5b5541690058cab16e130ad7f8118115c5c62ebcece952cd03f86aaa276a14e08b650f
- SSDEEP 49152:qHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:qnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1DBC58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f
- Size 2.5MB
- SHA256 3285f5cdc7f99dd9f812951d41c582744dc5aa62d261254467f4fa0c3840771f
- MD5 ca27c3621b51addc9bd387d61976056d
- SHA1 39edfe0abd78acb898d111221868e720b05d07bb
- SHA512 20c46b2320ba4ee6ff4401b3cd403d7227b14f7aca78d0f7c4a07f309e5b5541690058cab16e130ad7f8118115c5c62ebcece952cd03f86aaa276a14e08b650f
- SSDEEP 49152:qHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:qnKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1DBC58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory