General
- Target 807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479
- Size 448KB
- Sample260831-cfw3cawsby
- SHA256 807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479
- MD5 87ca19b051809cdda5229a25649efc8b
- SHA1 c222163759abab81c02aa93532277f669939c423
- SHA512 ab018390466fe26849e066df869c05b525da91d04dbdbcf1e02dc6c84a39fb2c7d7d521655d9919f16d55cfa4c6b61d639ede6e83f730787e829d4f2c71496b7
- SSDEEP 6144:kcTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:kSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T1D1A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479
- Size 448KB
- SHA256 807a6f2f38f76c8cf1d57c8bab6fa1036979a4994347e6005a16c7783fd87479
- MD5 87ca19b051809cdda5229a25649efc8b
- SHA1 c222163759abab81c02aa93532277f669939c423
- SHA512 ab018390466fe26849e066df869c05b525da91d04dbdbcf1e02dc6c84a39fb2c7d7d521655d9919f16d55cfa4c6b61d639ede6e83f730787e829d4f2c71496b7
- SSDEEP 6144:kcTgav1cdCTuoPbgwmOLJvKRILSFvdFbcEOkCybEaQRXr9HNdvOaty8KRpPUM:kSvO2x9mONvKRILSF/Okx2LIatyD
- TLSH T1D1A45C26B7909076C4B78674C8A247AAFBB1BC2127118B8FA39077191F73792BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory