General
- Target 420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7
- Size 615KB
- Sample260816-2v6b1ayeqc
- SHA256 420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7
- MD5 4f77cc78a68d9c9d9c193ce6f5db67c9
- SHA1 6a45ac730064ca8d7b7176330bcb3be0c9c7053e
- SHA512 50956c8525edef176e59fa61140c915242f5abc992f0b8f6ed771791a73b21091d71b0ca126941ec34fa1a030e631d96de87db318c0d34e55ee06705af75ee5f
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:BvO2xJKRI2FOkx2LFicUV
- TLSH T102D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7
- Size 615KB
- SHA256 420a02c61c7d8b935538d3b13afca24c5f2d89633f5c332a2b0a35b5b9e432d7
- MD5 4f77cc78a68d9c9d9c193ce6f5db67c9
- SHA1 6a45ac730064ca8d7b7176330bcb3be0c9c7053e
- SHA512 50956c8525edef176e59fa61140c915242f5abc992f0b8f6ed771791a73b21091d71b0ca126941ec34fa1a030e631d96de87db318c0d34e55ee06705af75ee5f
- SSDEEP 12288:aSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:BvO2xJKRI2FOkx2LFicUV
- TLSH T102D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory