General
- Target 1b7c133bbbbf2f79ab2c180eaff9e48a9077ba44b5c5c98b1bdacf1051dffd7b
- Size 2.9MB
- Sample260830-1cmw9sdd59
- SHA256 1b7c133bbbbf2f79ab2c180eaff9e48a9077ba44b5c5c98b1bdacf1051dffd7b
- MD5 1eb34a55d3b936d1d0dea61db27fe8a9
- SHA1 d9d87f3d011509710e232e8a9a3779fbd80122db
- SHA512 de9c48d24abf1345019856a67daa9d1c53229f3914158a1562f5ad1dca9ace10b1a65ee25a938d2442940ec05a7d0efd79709e96851f5a0d1161cad9bdafc058
- SSDEEP 49152:KHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:KnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T159D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1b7c133bbbbf2f79ab2c180eaff9e48a9077ba44b5c5c98b1bdacf1051dffd7b.exe
Resource
win10v2004-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1b7c133bbbbf2f79ab2c180eaff9e48a9077ba44b5c5c98b1bdacf1051dffd7b
- Size 2.9MB
- SHA256 1b7c133bbbbf2f79ab2c180eaff9e48a9077ba44b5c5c98b1bdacf1051dffd7b
- MD5 1eb34a55d3b936d1d0dea61db27fe8a9
- SHA1 d9d87f3d011509710e232e8a9a3779fbd80122db
- SHA512 de9c48d24abf1345019856a67daa9d1c53229f3914158a1562f5ad1dca9ace10b1a65ee25a938d2442940ec05a7d0efd79709e96851f5a0d1161cad9bdafc058
- SSDEEP 49152:KHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:KnKGEkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T159D59E31B6818036D1B7467186FA47BBA5257C211721A5CFB3C47B2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory