General
- Target 166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad
- Size 395KB
- Sample260821-gp2reax1ay
- SHA256 166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad
- MD5 9f45d595c83dabcbc9f49b3ab7b25073
- SHA1 b13c07c94899cc1f5aa13f3f5983375778442a84
- SHA512 f0877e2e839cdfce9a3a3f58c4c259fba600fecb59364034dc861514354c28a8bbae7e50bc8358c25e21b78d5780c977db9a05578f16deb2667f85571eb43470
- SSDEEP 6144:+cbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:+CSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1DB846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad
- Size 395KB
- SHA256 166182dab3c93c4b839e04f43f33c60be04b577550ba077a88ab800224c317ad
- MD5 9f45d595c83dabcbc9f49b3ab7b25073
- SHA1 b13c07c94899cc1f5aa13f3f5983375778442a84
- SHA512 f0877e2e839cdfce9a3a3f58c4c259fba600fecb59364034dc861514354c28a8bbae7e50bc8358c25e21b78d5780c977db9a05578f16deb2667f85571eb43470
- SSDEEP 6144:+cbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:+CSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1DB846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory