General
- Target 0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b
- Size 2.1MB
- Sample260815-zcafhatbkd
- SHA256 0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b
- MD5 4afd40e5fc158ff9c84222b909daf5de
- SHA1 205d2597d5916c4f736f4dcc42de0659ef14027b
- SHA512 929e14f7fe1731cdf2671ab7c4c6c5de6bc9b45634ce605d46b411a957b912309dbc9bc582d449b4c34f850b3845a40958421a2269c0c1ba36ba7af5a8cfc5f3
- SSDEEP 49152:lHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QL:lnKdVkOhCXHHFZMjHfUKkVWL
- TLSH T10EA57D31A6C18136E1B3867186FA56FAA5247C216311A5CFA3C47A291F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b
- Size 2.1MB
- SHA256 0ca81167196c4386441d8b19894afce4af3e73d593d8495e378510b9e607252b
- MD5 4afd40e5fc158ff9c84222b909daf5de
- SHA1 205d2597d5916c4f736f4dcc42de0659ef14027b
- SHA512 929e14f7fe1731cdf2671ab7c4c6c5de6bc9b45634ce605d46b411a957b912309dbc9bc582d449b4c34f850b3845a40958421a2269c0c1ba36ba7af5a8cfc5f3
- SSDEEP 49152:lHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QL:lnKdVkOhCXHHFZMjHfUKkVWL
- TLSH T10EA57D31A6C18136E1B3867186FA56FAA5247C216311A5CFA3C47A291F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory