General
- Target c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966
- Size 640KB
- Sample260830-3x67rasbqg
- SHA256 c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966
- MD5 65129f249b48b7d600fb33108fb3f1f6
- SHA1 0de6ad7c505cdb691c3ac5bb03d205fa6e566b7d
- SHA512 1ce3c748458e04fafac1b2ab7eb4e0f4ff9fea8a0919ce96a9513e3f7d092fc5589092535530c499a5cc246cdd7889459fa2c25a8764eff1d03ff27f03b17801
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T164D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966
- Size 640KB
- SHA256 c1c8c1bfbcc448cdb11b56cce45ec561d9c98a34395f1e855030229ef30df966
- MD5 65129f249b48b7d600fb33108fb3f1f6
- SHA1 0de6ad7c505cdb691c3ac5bb03d205fa6e566b7d
- SHA512 1ce3c748458e04fafac1b2ab7eb4e0f4ff9fea8a0919ce96a9513e3f7d092fc5589092535530c499a5cc246cdd7889459fa2c25a8764eff1d03ff27f03b17801
- SSDEEP 6144:tcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:tSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T164D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory