General
- Target 5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289
- Size 1.8MB
- Sample260817-aa8svazdjb
- SHA256 5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289
- MD5 18afa8670eb9d1419b9694f1a76bff49
- SHA1 63b5397c64214021428122dd57b37ae6be690123
- SHA512 b2bb5e54f6a58a145b355c20b8f2d08910443e25a4b0ea5adfc4f456f45fd725b1e1ef967b1849fdf731e98eb2c0150d41820ca8e7695f75fcf08e78083dbb2e
- SSDEEP 49152:iHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:inKdtWsM0r1QnxK4e
- TLSH T12685AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289
- Size 1.8MB
- SHA256 5193ef7ec1a4857311cb8e6e0be69ca7d49593a29e9a5b40e640853fd1236289
- MD5 18afa8670eb9d1419b9694f1a76bff49
- SHA1 63b5397c64214021428122dd57b37ae6be690123
- SHA512 b2bb5e54f6a58a145b355c20b8f2d08910443e25a4b0ea5adfc4f456f45fd725b1e1ef967b1849fdf731e98eb2c0150d41820ca8e7695f75fcf08e78083dbb2e
- SSDEEP 49152:iHHKO29Qm5QZuTtS0rQMYOQ+q8CEKTG4QN:inKdtWsM0r1QnxK4e
- TLSH T12685AE21B351C036D4AB01758ABA47AEA578BD21472551CBB3D47B7E1FB23D2AE3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory