General
- Target f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078
- Size 1.6MB
- Sample260818-eqjwwawbld
- SHA256 f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078
- MD5 c9f3c813fdfbc44c83245f7fac32e9b2
- SHA1 c99732beaeb06a927ceed5f5cede86e732136189
- SHA512 4b74eb2b83f556bcb8e2c1717101188f891427dc50a01d2e5a4031eaa7d288c2de68d96cf74869a5e63566e9aae40f0524b56cfcf5076e54e27720be16e0f439
- SSDEEP 24576:ZvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:ZHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T178759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078
- Size 1.6MB
- SHA256 f8ed9313dde6978fa3e1f240a3b89ed7805ca97cffaa5b72f9b436b25f5af078
- MD5 c9f3c813fdfbc44c83245f7fac32e9b2
- SHA1 c99732beaeb06a927ceed5f5cede86e732136189
- SHA512 4b74eb2b83f556bcb8e2c1717101188f891427dc50a01d2e5a4031eaa7d288c2de68d96cf74869a5e63566e9aae40f0524b56cfcf5076e54e27720be16e0f439
- SSDEEP 24576:ZvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:ZHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T178759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory