General
- Target 68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8
- Size 679KB
- Sample260831-flb6xadn8v
- SHA256 68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8
- MD5 cd141ac3edb4912d28d118d67d19877e
- SHA1 1c75a48705f1a1b485e0a8439ee4ef2a679757fb
- SHA512 56ac60d6707a2c29b200c436e696d39edd59d470034a879beca893ee81d98c90b0e5c5c1876554fdcf4cf8defdcb9464f9bcfae8486cfd591cb01a86eaed121d
- SSDEEP 12288:sSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:fvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1F0E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8
- Size 679KB
- SHA256 68fea0ebf5cb8c91d3863c9ea29525dd1c9871d5182207bba493b9775484d9c8
- MD5 cd141ac3edb4912d28d118d67d19877e
- SHA1 1c75a48705f1a1b485e0a8439ee4ef2a679757fb
- SHA512 56ac60d6707a2c29b200c436e696d39edd59d470034a879beca893ee81d98c90b0e5c5c1876554fdcf4cf8defdcb9464f9bcfae8486cfd591cb01a86eaed121d
- SSDEEP 12288:sSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:fvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1F0E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory