General
- Target 29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2
- Size 395KB
- Sample260816-2tatpsgd47
- SHA256 29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2
- MD5 f442790fcc64d5489c74fc144ceda45d
- SHA1 7caf3b129d7ac362ea0cf29ee77a5de9e697c91a
- SHA512 404ed05fb7baf04e55d2adca31e7cc7c91af9ce2df69a6e57b777bf46bb3deb97e1fa29933a4ea47348e30bb6d9982a4586b23445d4bee476ad33b876ffc6810
- SSDEEP 6144:FWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:FkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1C0846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2
- Size 395KB
- SHA256 29afb30b9c2bc27ffb24969a43e4a2ea32137d7e5d8f0c2e5d2536ca34a304b2
- MD5 f442790fcc64d5489c74fc144ceda45d
- SHA1 7caf3b129d7ac362ea0cf29ee77a5de9e697c91a
- SHA512 404ed05fb7baf04e55d2adca31e7cc7c91af9ce2df69a6e57b777bf46bb3deb97e1fa29933a4ea47348e30bb6d9982a4586b23445d4bee476ad33b876ffc6810
- SSDEEP 6144:FWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:FkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T1C0846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory