General
- Target 309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a
- Size 576KB
- Sample260820-m5srbsaq4v
- SHA256 309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a
- MD5 ee63a0c19b80ca533174a806d0f925e1
- SHA1 9241d73a61dfeaf94cd8775f003e336ff44afee9
- SHA512 03de90d805600010b6c7b54e2db1d04b6cb53cdc3876d21867d5aebff34d63e9a3808a0b1a31df0c176970ea25bb023925fdbcfa8832c32770e07cf017760f07
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:fSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T144C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a
- Size 576KB
- SHA256 309e1d1991f87aee110b36a2bfd82ce8be84c01504c8171fee5f06f8c8449c9a
- MD5 ee63a0c19b80ca533174a806d0f925e1
- SHA1 9241d73a61dfeaf94cd8775f003e336ff44afee9
- SHA512 03de90d805600010b6c7b54e2db1d04b6cb53cdc3876d21867d5aebff34d63e9a3808a0b1a31df0c176970ea25bb023925fdbcfa8832c32770e07cf017760f07
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRXr9HNdvOa+y8K/:fSvO2x9mONvKRwLSFtsOkx2LIa+yx
- TLSH T144C46D26B6908072C4779578C4A257AAFBB1BC2127204ACFA390775A1F737D2BE3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory