General
- Target d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa
- Size 1.6MB
- Sample260817-fffxxahe46
- SHA256 d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa
- MD5 441465087bb8551515b3f6c907d2c643
- SHA1 71d7617f260504253ebd3e2a18ccbbd7e4aee5e5
- SHA512 a9f5897cc9bfe5f99c276a2a3f52f305fd6e72601138a63f04cc1d2886cc8334618f113f52076a85c8b68cc91740bc48d5ecb509b9f67a2b4efc74e274181e63
- SSDEEP 24576:3vO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:3HHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T11B759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa
- Size 1.6MB
- SHA256 d88e4914bcd4c6fa1d5e1e838628c21067b738453ccc1a5774800ac6671535aa
- MD5 441465087bb8551515b3f6c907d2c643
- SHA1 71d7617f260504253ebd3e2a18ccbbd7e4aee5e5
- SHA512 a9f5897cc9bfe5f99c276a2a3f52f305fd6e72601138a63f04cc1d2886cc8334618f113f52076a85c8b68cc91740bc48d5ecb509b9f67a2b4efc74e274181e63
- SSDEEP 24576:3vO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:3HHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T11B759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory