General
- Target 179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe
- Size 419KB
- Sample260831-dysnbatgnh
- SHA256 179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe
- MD5 03bf8d5868fb0c4875a7dbb9a19a2bd4
- SHA1 cee60fb8dfb2d90130783463860d056f481d151a
- SHA512 c95b952bf36fb73e3372c46ebd03f52d6f6f07899350d2419e49a81bd3a74738b43ff9e2d7d04a9c16c5d9be527e29352a76f859302a284b9b79a345d7aa9690
- SSDEEP 6144:Q6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:Q6D/WiA3YcyVDLjOkx2LIa
- TLSH T11A947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe
- Size 419KB
- SHA256 179ad6f1e7a47ff01e48576e4a5fe01e6cdaca47cf4e8dd45b61bed1151be9fe
- MD5 03bf8d5868fb0c4875a7dbb9a19a2bd4
- SHA1 cee60fb8dfb2d90130783463860d056f481d151a
- SHA512 c95b952bf36fb73e3372c46ebd03f52d6f6f07899350d2419e49a81bd3a74738b43ff9e2d7d04a9c16c5d9be527e29352a76f859302a284b9b79a345d7aa9690
- SSDEEP 6144:Q6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:Q6D/WiA3YcyVDLjOkx2LIa
- TLSH T11A947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory