General
- Target 1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66
- Size 3.0MB
- Sample260825-dxslxssthv
- SHA256 1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66
- MD5 3706d722f4c6ea725372cbc32818555b
- SHA1 9c7a69e530172cacc1d333ed2be2e3f32a35f547
- SHA512 f99bdf8293289e0dd4da9c7b60dd7d3b9edfd89d5c09df0e06e7c83386a3df22c22af3a00b1e59912c5834c7919e2561d64b93d4940241febdef7263441594b6
- SSDEEP 49152:4A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/://whnLrHp/qKm2/Sb/
- TLSH T10BE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66.exe
Resource
win11ltsc2024-20260709-en
2 signatures
150 seconds
Malware Config
Targets
-
- Target 1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66
- Size 3.0MB
- SHA256 1165b194a9884a4ced8b76a24dc21ee62bd21a6deca2ccc5964700dc9ac44d66
- MD5 3706d722f4c6ea725372cbc32818555b
- SHA1 9c7a69e530172cacc1d333ed2be2e3f32a35f547
- SHA512 f99bdf8293289e0dd4da9c7b60dd7d3b9edfd89d5c09df0e06e7c83386a3df22c22af3a00b1e59912c5834c7919e2561d64b93d4940241febdef7263441594b6
- SSDEEP 49152:4A/JuTQKqVmgbQIzZMPXpB91rHpn/qKmNAOaG6IOY/://whnLrHp/qKm2/Sb/
- TLSH T10BE55953EB914AE8E39D0536DF544150E72AF2256BEF13A27428420DDE83387BF61A3D
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory