General
- Target e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53
- Size 395KB
- Sample260816-tx3pwssaja
- SHA256 e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53
- MD5 e7bb4e09dc7c6ff721f83f87dec24f08
- SHA1 10ccf5088daa9ca8add7fc4f52fbf6d510842602
- SHA512 60bb191c167a120fa938e9bf89d35bcc5b45d53b41e5339197b7fd99a9041190a13dc0b916408f52705713120bb4f474f715850d5732f3b3923999c399490afb
- SSDEEP 6144:Ww6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:WQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T113846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53
- Size 395KB
- SHA256 e44f6676fb45ffbc64a004ff184c2ea95d7faa6d1a4a19eea44bcab61b228e53
- MD5 e7bb4e09dc7c6ff721f83f87dec24f08
- SHA1 10ccf5088daa9ca8add7fc4f52fbf6d510842602
- SHA512 60bb191c167a120fa938e9bf89d35bcc5b45d53b41e5339197b7fd99a9041190a13dc0b916408f52705713120bb4f474f715850d5732f3b3923999c399490afb
- SSDEEP 6144:Ww6O71c8GoBjS3BYLvV61qL2LZlRFZcEOkCybEaQRXr9HNdvOaty8K:WQ7O8f8BY7V61qL2LNOkx2LIaty
- TLSH T113846C2AF6A09072C4779579C4A256A6FFB1B42237204ACFA390475A1F337E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory