General
- Target 4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436
- Size 1.6MB
- Sample260826-1nttysxblf
- SHA256 4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436
- MD5 7db36e95a6c4b167e3d0ea7377027d22
- SHA1 a246520419ff5afd45b09ecabbd58474dddb64e1
- SHA512 3d99ee138d5d4f7378c37c425fc8f5a85d1cc9bef1e5b78ce352aacd1d095a4d0689d6eda07ccc20a0c64c90232594d93d2ffab0192af55ca28045b5cd52a327
- SSDEEP 24576:qvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:qHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T1C9759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436
- Size 1.6MB
- SHA256 4476a7c00b186fc443bcba796c7e6c1737eeceaa013067c74ae3df93d2c4c436
- MD5 7db36e95a6c4b167e3d0ea7377027d22
- SHA1 a246520419ff5afd45b09ecabbd58474dddb64e1
- SHA512 3d99ee138d5d4f7378c37c425fc8f5a85d1cc9bef1e5b78ce352aacd1d095a4d0689d6eda07ccc20a0c64c90232594d93d2ffab0192af55ca28045b5cd52a327
- SSDEEP 24576:qvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAKjH4:qHHKO29Qm5QZuTtS0rQMYOQ+q8CEKT4
- TLSH T1C9759E21B351C036D4AB01758AB987AEA578BD710B2551C7B3C47B7E6FB12D2AA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory