General
- Target 3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84
- Size 3.0MB
- Sample260815-zbfwwstbja
- SHA256 3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84
- MD5 21ffd2f30d4d1ba886ddb899de6447cb
- SHA1 70b5b761769d2d4c94cb2a0ba682df690fc040ca
- SHA512 349609daf1ea9d7d8a9af3e80c653bd4969c0dd7268712b9dc8fe4bff283db74af815992e8ad7b246b97d0251ad893e9321f75540f407ccb7b26a583866d3d52
- SSDEEP 49152:nHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:nnKdBWsM0r1Qn1K4XKH40Feq
- TLSH T1BAE59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84
- Size 3.0MB
- SHA256 3a8e8eca20507c11f6e5fdfe5ab3d5cc0fc06377de18f36227e7a6dada083a84
- MD5 21ffd2f30d4d1ba886ddb899de6447cb
- SHA1 70b5b761769d2d4c94cb2a0ba682df690fc040ca
- SHA512 349609daf1ea9d7d8a9af3e80c653bd4969c0dd7268712b9dc8fe4bff283db74af815992e8ad7b246b97d0251ad893e9321f75540f407ccb7b26a583866d3d52
- SSDEEP 49152:nHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:nnKdBWsM0r1Qn1K4XKH40Feq
- TLSH T1BAE59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory