General
- Target a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3
- Size 511KB
- Sample260823-en6mvsdr8z
- SHA256 a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3
- MD5 f195b16701a4dd70c321813a1743095d
- SHA1 3ba9e795e406145f7ddb53fef8521cc0576ad5e2
- SHA512 4df1bbf24a103803aeafa64640559e6dbdb8f6d17e0e71e06ca96fdcc0f1d118d4a53fe04af28b5087e4b8b2d76624d93868d25b1e2ecb00a634e995c6d430ec
- SSDEEP 6144:HcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:HSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D7B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3
- Size 511KB
- SHA256 a72b9d1a2571e3aa8a081bce9051acd3be88c8e0efd00513bcd2c95e2e6485b3
- MD5 f195b16701a4dd70c321813a1743095d
- SHA1 3ba9e795e406145f7ddb53fef8521cc0576ad5e2
- SHA512 4df1bbf24a103803aeafa64640559e6dbdb8f6d17e0e71e06ca96fdcc0f1d118d4a53fe04af28b5087e4b8b2d76624d93868d25b1e2ecb00a634e995c6d430ec
- SSDEEP 6144:HcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:HSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D7B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory