General
- Target edffe4560cdc0d9b6a1d9a5a6864df2ec4f0116de8533f5c0d6f427e08901f7a
- Size 560KB
- Sample260824-apfevaw1b1
- SHA256 edffe4560cdc0d9b6a1d9a5a6864df2ec4f0116de8533f5c0d6f427e08901f7a
- MD5 19fb1168c03a29c81c74974425301faf
- SHA1 15dc4b1a37b6ee350a235271d69d86eff1f41494
- SHA512 a06cbe50f7e03c223c34dac9866c712d54d0d0327fc9cd660f1c59079e1dae7b885bec11f40a3b27f366d554020754ee02cdf703c7fb06ac5db7e0ceb498dfe7
- SSDEEP 6144:E4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ErNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1CAC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
edffe4560cdc0d9b6a1d9a5a6864df2ec4f0116de8533f5c0d6f427e08901f7a.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target edffe4560cdc0d9b6a1d9a5a6864df2ec4f0116de8533f5c0d6f427e08901f7a
- Size 560KB
- SHA256 edffe4560cdc0d9b6a1d9a5a6864df2ec4f0116de8533f5c0d6f427e08901f7a
- MD5 19fb1168c03a29c81c74974425301faf
- SHA1 15dc4b1a37b6ee350a235271d69d86eff1f41494
- SHA512 a06cbe50f7e03c223c34dac9866c712d54d0d0327fc9cd660f1c59079e1dae7b885bec11f40a3b27f366d554020754ee02cdf703c7fb06ac5db7e0ceb498dfe7
- SSDEEP 6144:E4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ErNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T1CAC48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory