General
- Target 5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318
- Size 511KB
- Sample260820-2xcgpswhqe
- SHA256 5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318
- MD5 4c7fae5de0dcb08cc2b151d36888fa59
- SHA1 17d307f94e86126342a90bfbe3803b2ca30b66cb
- SHA512 bf2d719e5952709624fca683ffca8d15289618184632063493218326319ae527202e84078693a5dbfb3086fd6ddf013f7e18e4309acadc6a322e593da71e8770
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:GSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1A3B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318
- Size 511KB
- SHA256 5c9a17ae21448941516c0a318f6548d304d2d4bc4144f8b00aa97be7a6aab318
- MD5 4c7fae5de0dcb08cc2b151d36888fa59
- SHA1 17d307f94e86126342a90bfbe3803b2ca30b66cb
- SHA512 bf2d719e5952709624fca683ffca8d15289618184632063493218326319ae527202e84078693a5dbfb3086fd6ddf013f7e18e4309acadc6a322e593da71e8770
- SSDEEP 6144:GcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:GSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1A3B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory