General
- Target 8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08
- Size 768KB
- Sample260831-e1257svckd
- SHA256 8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08
- MD5 65cb2b692b18b48945a8e32ff24cde2f
- SHA1 6966648dc45c3d18e618851bdcc0b9c90f393732
- SHA512 771904e6e1ec721826712eb76f0f904c8b20dead0f92a95762fcf3c3ad984dfc3c760a06ce9beebca481a110f264b8f9a79b99d5b002f869f156eda6366ca824
- SSDEEP 12288:ZqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:ZjHPOSOkx2LFscU6UQOJdT
- TLSH T108F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08
- Size 768KB
- SHA256 8f2e93da1049b57764d11f58346bd948dc359d08b11b989c5626da5369654b08
- MD5 65cb2b692b18b48945a8e32ff24cde2f
- SHA1 6966648dc45c3d18e618851bdcc0b9c90f393732
- SHA512 771904e6e1ec721826712eb76f0f904c8b20dead0f92a95762fcf3c3ad984dfc3c760a06ce9beebca481a110f264b8f9a79b99d5b002f869f156eda6366ca824
- SSDEEP 12288:ZqXUHkUXe39sOkx2LIan5FAQjU/LikGU5rCOTeidT:ZjHPOSOkx2LFscU6UQOJdT
- TLSH T108F47D31E241C036D6A74572C6FA4BBBA5247D25431161CBA7C4BA262FB76D2FA3130F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory