General
- Target e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc
- Size 3.0MB
- Sample260831-bwkhtack4z
- SHA256 e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc
- MD5 505035c9aaffbc6c7401c0603c18a3c6
- SHA1 09db1e91a13935463d08caa8fb910d934f631464
- SHA512 3375e24b3769be28b92143cbd3ccd4b0139b7cd634b846228df09f869345ecddc0661139a7d33a09e3ceb352f133cef06f3f0b366dc7a28760453b7637720474
- SSDEEP 49152:+HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:+nKdBWsM0r1Qn1K4XKH40Feu
- TLSH T141E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc
- Size 3.0MB
- SHA256 e0f692cc48c8684080808dac70211176bea638ed7412653e5a7167458b521ddc
- MD5 505035c9aaffbc6c7401c0603c18a3c6
- SHA1 09db1e91a13935463d08caa8fb910d934f631464
- SHA512 3375e24b3769be28b92143cbd3ccd4b0139b7cd634b846228df09f869345ecddc0661139a7d33a09e3ceb352f133cef06f3f0b366dc7a28760453b7637720474
- SSDEEP 49152:+HHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:+nKdBWsM0r1Qn1K4XKH40Feu
- TLSH T141E58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory