General
- Target 0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb
- Size 384KB
- Sample260822-1js2vsvsh1
- SHA256 0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb
- MD5 401ffcf0ee7324d1d84688fd62b1cb90
- SHA1 81b743649e5cf98326b5abc9c8cd7d6ad4fe2d8d
- SHA512 df72a8c49aeccb313b608e0681e59a0584e9443fe5ffc52b66eb023103cf4453ed72e6c04b54b2cd77f8f9e4d84c8d9f18ac52b9f9a0cd7df589fefbebe38f1e
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8Kl:lSvO2x9mONvKRILSFnOkx2LIaxy/
- TLSH T12C846E2AF6A0D076C4779579C4A257AAFBB1B42137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb
- Size 384KB
- SHA256 0bae210b5757a5da5a0914cd2e008cbed7db1f364f3a8dbc35389fbb422710bb
- MD5 401ffcf0ee7324d1d84688fd62b1cb90
- SHA1 81b743649e5cf98326b5abc9c8cd7d6ad4fe2d8d
- SHA512 df72a8c49aeccb313b608e0681e59a0584e9443fe5ffc52b66eb023103cf4453ed72e6c04b54b2cd77f8f9e4d84c8d9f18ac52b9f9a0cd7df589fefbebe38f1e
- SSDEEP 6144:lcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8Kl:lSvO2x9mONvKRILSFnOkx2LIaxy/
- TLSH T12C846E2AF6A0D076C4779579C4A257AAFBB1B42137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory