General
- Target 137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39
- Size 374KB
- Sample260823-3kvm7abm6t
- SHA256 137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39
- MD5 ecae218cfb32b372f0229676f3c4941f
- SHA1 439d0cef1a576a92f9e94c7ccfb1e9f4f63fe195
- SHA512 f50f64c1aec89374d985514e69334ce5fc6bdf51b7cdde9ac89f012aba20b989c0aa05f0ece2ea3c2d31aa4d5663565ad40cb24723dd5e0417440eeb153f27ff
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:WSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T17D846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39
- Size 374KB
- SHA256 137f6a27753a5c05f414c39d353a585af1b89a741213c7ee2f6ca52b837e2d39
- MD5 ecae218cfb32b372f0229676f3c4941f
- SHA1 439d0cef1a576a92f9e94c7ccfb1e9f4f63fe195
- SHA512 f50f64c1aec89374d985514e69334ce5fc6bdf51b7cdde9ac89f012aba20b989c0aa05f0ece2ea3c2d31aa4d5663565ad40cb24723dd5e0417440eeb153f27ff
- SSDEEP 6144:WcTgav1cdCTuoPbgwmOLJvKRILSFvdFfcEOkCybEaQRXr9HNdvOaxy8K:WSvO2x9mONvKRILSFLOkx2LIaxy
- TLSH T17D846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory