General
- Target 106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d
- Size 640KB
- Sample260822-1dmynavsbv
- SHA256 106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d
- MD5 7dde6dc7385eec57a4f118bd984c70a4
- SHA1 08fe46f7ea541330b959f2c4d048cf6868874724
- SHA512 055508142c22d2ef817c079b26c63a39764eeb56ad4a98f87c4aeebb77d7203a68e693bdc6c921fdc167c6f33838825542f39e11b7d33496b6a4d22b8877d8bf
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:MSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D6D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d
- Size 640KB
- SHA256 106790d04449d4a0b84e6b0f5d2abf81eac56edaf5ef045a7d567fb4b7a2c06d
- MD5 7dde6dc7385eec57a4f118bd984c70a4
- SHA1 08fe46f7ea541330b959f2c4d048cf6868874724
- SHA512 055508142c22d2ef817c079b26c63a39764eeb56ad4a98f87c4aeebb77d7203a68e693bdc6c921fdc167c6f33838825542f39e11b7d33496b6a4d22b8877d8bf
- SSDEEP 6144:McTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:MSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T1D6D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory