General
- Target eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10
- Size 1.6MB
- Sample260825-jes3mayamh
- SHA256 eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10
- MD5 20be8245390d98b21a3e6b27fd3b33ad
- SHA1 1da86f765c87774ac71e13ac7cf42a19da9bfb6e
- SHA512 f4ecf9b90070dead16decca99d8128c5559586c03290693a33a412d7bc67c0e3182bbf981bfa0a617030397afd1e7cfd57f938caceb1c09244fb3b86a59a40a9
- SSDEEP 24576:TvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:THHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T123759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10
- Size 1.6MB
- SHA256 eb68f5cb93798d0d92afeb6d463201e37f6200324feb2851de0e4694946c1f10
- MD5 20be8245390d98b21a3e6b27fd3b33ad
- SHA1 1da86f765c87774ac71e13ac7cf42a19da9bfb6e
- SHA512 f4ecf9b90070dead16decca99d8128c5559586c03290693a33a412d7bc67c0e3182bbf981bfa0a617030397afd1e7cfd57f938caceb1c09244fb3b86a59a40a9
- SSDEEP 24576:TvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:THHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T123759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory