General
- Target c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce
- Size 643KB
- Sample260823-jjwpbavara
- SHA256 c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce
- MD5 a26235625464a5c777cb5259fe8624b4
- SHA1 b70a3b1b02a57f8c31a226a6d98a878c1c99cfab
- SHA512 849e120bd59d671540fe779a33a7a739746b6821bbcbb864c428331ff94190c539ffd895010fd4355aa91b58284490e332d9a4b71044b4e9f0926d2a9fddefee
- SSDEEP 12288:bSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:uvO2xJKRI2FOkx2LFEvcU0
- TLSH T176E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce
- Size 643KB
- SHA256 c45418027488fc0dfec111bdc2c6db7fc5266e7569eaf2dd59a8e3b20b79bbce
- MD5 a26235625464a5c777cb5259fe8624b4
- SHA1 b70a3b1b02a57f8c31a226a6d98a878c1c99cfab
- SHA512 849e120bd59d671540fe779a33a7a739746b6821bbcbb864c428331ff94190c539ffd895010fd4355aa91b58284490e332d9a4b71044b4e9f0926d2a9fddefee
- SSDEEP 12288:bSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Likg:uvO2xJKRI2FOkx2LFEvcU0
- TLSH T176E45A31E241C03AD4A74576C6FA0BBFE9647D25531165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory