General
- Target 40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93
- Size 2.0MB
- Sample260831-ee2mjswzb1
- SHA256 40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93
- MD5 2d0140c28698a4ee3c894c988fb96c15
- SHA1 4d21542561bc1c97d335156769767ebe77348976
- SHA512 6d9c563e70a37b50811a0a87992a3adcfd95c1f942a039e76da1355e67a0f0605cc806743f19254576d3d66232b9f2bb4cb119bc7318b6f5a0946670365ae501
- SSDEEP 49152:rHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:rnKdVkOhCXHHFZMjHfUKkVi
- TLSH T1D6A57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93
- Size 2.0MB
- SHA256 40fe3b51eac73cdf554333883df0e2c1aa98ffe26d5b53f6c9d2c0a2f81f2e93
- MD5 2d0140c28698a4ee3c894c988fb96c15
- SHA1 4d21542561bc1c97d335156769767ebe77348976
- SHA512 6d9c563e70a37b50811a0a87992a3adcfd95c1f942a039e76da1355e67a0f0605cc806743f19254576d3d66232b9f2bb4cb119bc7318b6f5a0946670365ae501
- SSDEEP 49152:rHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy58:rnKdVkOhCXHHFZMjHfUKkVi
- TLSH T1D6A57D31A6C18036E1B3867586FA56FAA5247C216311A5CF63C47A2A1F737D3EE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory