General
- Target 1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3
- Size 615KB
- Sample260831-lwtftszblb
- SHA256 1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3
- MD5 e174e68185a07c7b826102c3b447696b
- SHA1 2c5c5bb6c21b232924c0af33da2d8b2397ea43e9
- SHA512 4aa2022a0450870960aa9ef11db9e76e77337fb5d3f4c8721bbc58f2bc81c0847a9d401e8d31e2e781ffb225daa18176bbbf084edfec9df3fbebbe93d4acb3e2
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:YvO2xJKRI2FOkx2LFicUV
- TLSH T146D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3
- Size 615KB
- SHA256 1b9b077023eb3ed5478397c495498b153fca785ca78e20934c1fc1143a52e9e3
- MD5 e174e68185a07c7b826102c3b447696b
- SHA1 2c5c5bb6c21b232924c0af33da2d8b2397ea43e9
- SHA512 4aa2022a0450870960aa9ef11db9e76e77337fb5d3f4c8721bbc58f2bc81c0847a9d401e8d31e2e781ffb225daa18176bbbf084edfec9df3fbebbe93d4acb3e2
- SSDEEP 12288:xSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:YvO2xJKRI2FOkx2LFicUV
- TLSH T146D44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory