General
- Target 778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048
- Size 896KB
- Sample260822-1ffx5age53
- SHA256 778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048
- MD5 d9d1745c2753005bebb4130c8e4ed375
- SHA1 7a935d06ae981f70e486c7a5cac5a3d3354fafd0
- SHA512 e94aa0fa233a6922be6355db2814383319a80f8d021f2c24c71c7f5eedb6db8906896a0169226b3d6ac28816cd902d9f2d68003da7e3291721eaad3f7501004f
- SSDEEP 12288:4SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:TvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T10C157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048
- Size 896KB
- SHA256 778e028ee18a5828c57f478a20c11c8059b4198ef794eabfd8aa5d5c2c3a1048
- MD5 d9d1745c2753005bebb4130c8e4ed375
- SHA1 7a935d06ae981f70e486c7a5cac5a3d3354fafd0
- SHA512 e94aa0fa233a6922be6355db2814383319a80f8d021f2c24c71c7f5eedb6db8906896a0169226b3d6ac28816cd902d9f2d68003da7e3291721eaad3f7501004f
- SSDEEP 12288:4SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:TvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T10C157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory