General
- Target 5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab
- Size 395KB
- Sample260824-kdh2psdr4t
- SHA256 5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab
- MD5 5c50c543c360425ee21f72dc31604bca
- SHA1 0ca00a141e443ca3fb7111267445fc3e48e4e327
- SHA512 d6c8416922fe7f8e2eb59a210b1f9ed6bb36901cb46c1257b91803f10a7116efedde9735217a1777fb977cb5a08596b78b6375e636c20eaa3a239b3ea0ebbea9
- SSDEEP 6144:2QtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:239OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1EE847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab
- Size 395KB
- SHA256 5db49250f176ecb0732e8325719c3adefe0987d93de330a1749d502251116dab
- MD5 5c50c543c360425ee21f72dc31604bca
- SHA1 0ca00a141e443ca3fb7111267445fc3e48e4e327
- SHA512 d6c8416922fe7f8e2eb59a210b1f9ed6bb36901cb46c1257b91803f10a7116efedde9735217a1777fb977cb5a08596b78b6375e636c20eaa3a239b3ea0ebbea9
- SSDEEP 6144:2QtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:239OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1EE847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory