General
- Target 56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503
- Size 395KB
- Sample260818-enb39afc64
- SHA256 56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503
- MD5 a06dd4f57c391aa0251bbf3b380eefa1
- SHA1 ce1f82e284714fab3d5a3f9d941955a2983ecd37
- SHA512 8380992bd3bbfe2a0580acd358bac838aff0ea494365ea08f09c12faa8bc7bae4007ea0a8248787bad4391c302107240c443943ca780c3f8c176e25a9fb49c49
- SSDEEP 6144:eWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:ekCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T17F846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503
- Size 395KB
- SHA256 56b690a9b07a4b472130fba4ab84517eea35b98e7cc9eaa10ffe0d64b9cfd503
- MD5 a06dd4f57c391aa0251bbf3b380eefa1
- SHA1 ce1f82e284714fab3d5a3f9d941955a2983ecd37
- SHA512 8380992bd3bbfe2a0580acd358bac838aff0ea494365ea08f09c12faa8bc7bae4007ea0a8248787bad4391c302107240c443943ca780c3f8c176e25a9fb49c49
- SSDEEP 6144:eWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:ekCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T17F846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory