General
- Target 635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324
- Size 3.3MB
- Sample260822-1e7dpazcld
- SHA256 635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324
- MD5 60eed2051c30347534981833e54182dd
- SHA1 9409a183933a0239890147f6a51a33dcc200bf9b
- SHA512 a37710ae8d476fd707540e7218414ca8501bc1ece336d4d6d892906212bb9acdb533c00cc03d3bc0cd9d8fdebe05390e7536ac961cc0126743b314aa4dd69205
- SSDEEP 24576:tvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:tHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T1F0F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324
- Size 3.3MB
- SHA256 635477382ab096c4c45f1e6e1d45f54d8f7b6ff217b5c8c3fe427610579d9324
- MD5 60eed2051c30347534981833e54182dd
- SHA1 9409a183933a0239890147f6a51a33dcc200bf9b
- SHA512 a37710ae8d476fd707540e7218414ca8501bc1ece336d4d6d892906212bb9acdb533c00cc03d3bc0cd9d8fdebe05390e7536ac961cc0126743b314aa4dd69205
- SSDEEP 24576:tvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:tHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T1F0F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory