General
- Target f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5
- Size 3.0MB
- Sample260831-dhgwwaed89
- SHA256 f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5
- MD5 bc1cbb9deef0a10d2406e742475a42e9
- SHA1 7cd4de704ab61e20bd18c8e4f256456838b98d6a
- SHA512 6bb20825320ddd2307375869550b4050bfdd67fabdf08353f05e8fbff5bbd9ef6dfd7d197d786bbf41a9ca2f901775c2a104a4d3e04f68273024f143510437b6
- SSDEEP 49152:1HHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQd5QZuTtS0rQMYOQ+q8z:1nKl2qOb2lP8ssYoJxKkyWsM0r1Qq
- TLSH T102E5C011F7A1C036C4AB0171897AC76EA574BD210B259AC7B3C47B6E5FB23D1AE3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5
- Size 3.0MB
- SHA256 f3c8d56fff47f9c6fa8b32d36e11c1e128a7a17311476306e7870f866767cad5
- MD5 bc1cbb9deef0a10d2406e742475a42e9
- SHA1 7cd4de704ab61e20bd18c8e4f256456838b98d6a
- SHA512 6bb20825320ddd2307375869550b4050bfdd67fabdf08353f05e8fbff5bbd9ef6dfd7d197d786bbf41a9ca2f901775c2a104a4d3e04f68273024f143510437b6
- SSDEEP 49152:1HHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQd5QZuTtS0rQMYOQ+q8z:1nKl2qOb2lP8ssYoJxKkyWsM0r1Qq
- TLSH T102E5C011F7A1C036C4AB0171897AC76EA574BD210B259AC7B3C47B6E5FB23D1AE3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory