General
- Target 4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168
- Size 419KB
- Sample260816-e4se6szcnc
- SHA256 4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168
- MD5 8f84c89660228415ebedd298cb2f9d00
- SHA1 1db9352ea81ba37735098fd5db735f90edf5a2b4
- SHA512 d991833c01664175079716aae227e060c626cb842c799100f28758b65e33cf28261bfb0c2c4dab8c5b7e364afc86e735ed4d2d1cc441a90cac011256820248c0
- SSDEEP 6144:IatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:IatG+S9+kaTDHrOkx2LIa
- TLSH T17C948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168
- Size 419KB
- SHA256 4db38e30e248319c7ecee66d1bfaa44d952578f4174efbe66eada783b4f8c168
- MD5 8f84c89660228415ebedd298cb2f9d00
- SHA1 1db9352ea81ba37735098fd5db735f90edf5a2b4
- SHA512 d991833c01664175079716aae227e060c626cb842c799100f28758b65e33cf28261bfb0c2c4dab8c5b7e364afc86e735ed4d2d1cc441a90cac011256820248c0
- SSDEEP 6144:IatygN+TkFSLZ+knaTDH76VFwcEOkCybEaQRXr9HNdvOa:IatG+S9+kaTDHrOkx2LIa
- TLSH T17C948C19FAA08076C563857AC4E257A6FBB1B5223B109ACF639007565F237E3BD3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory