General
- Target f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010
- Size 766KB
- Sample260824-amn9za1gja
- SHA256 f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010
- MD5 f6152359a20b36213375de8d47e99f6d
- SHA1 15ff72dae73f99589614e654e373dfbea5d4e7de
- SHA512 74cbf6c1551ca6410229d8ada9556b801412a57f5924ae6779c131d1520ab90306b876b4d8bfd3c77f3acc1dd291959ec03ba3964624dce81f5b0d4a9052dbd8
- SSDEEP 12288:MSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:/vO2xJKRw2kOkx2LFRvcUV
- TLSH T11FF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Behavioral task
behavioral2
Sample
f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010
- Size 766KB
- SHA256 f657e5cd2cb33d04a4ecc3c86fd5e01f983b7d87d1a7ceb8b430c9c07bc17010
- MD5 f6152359a20b36213375de8d47e99f6d
- SHA1 15ff72dae73f99589614e654e373dfbea5d4e7de
- SHA512 74cbf6c1551ca6410229d8ada9556b801412a57f5924ae6779c131d1520ab90306b876b4d8bfd3c77f3acc1dd291959ec03ba3964624dce81f5b0d4a9052dbd8
- SSDEEP 12288:MSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:/vO2xJKRw2kOkx2LFRvcUV
- TLSH T11FF45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory