General
- Target 285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c
- Size 615KB
- Sample260819-2rhrjavera
- SHA256 285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c
- MD5 064bca239d3b81128b335c062cec2850
- SHA1 5276c4d06d63ae1bbbdbbbb4342e7817d8c24648
- SHA512 c33b64d74a8a71abcbfc7e8b20138d1d68d67b6408f47bc200e98f2b9df7520f1c69de33c624676cd6963e2aa76be5e1b0d878d7034a9e05b91b31daa98064b1
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:YvO2xJKRI2FOkx2LFicUV
- TLSH T114D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c
- Size 615KB
- SHA256 285463920861fc43981541a94b94dba1fbb1a7bb348ab625f3a7312015b8a57c
- MD5 064bca239d3b81128b335c062cec2850
- SHA1 5276c4d06d63ae1bbbdbbbb4342e7817d8c24648
- SHA512 c33b64d74a8a71abcbfc7e8b20138d1d68d67b6408f47bc200e98f2b9df7520f1c69de33c624676cd6963e2aa76be5e1b0d878d7034a9e05b91b31daa98064b1
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:YvO2xJKRI2FOkx2LFicUV
- TLSH T114D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory