General
- Target 1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa
- Size 560KB
- Sample260831-tb4eascm6w
- SHA256 1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa
- MD5 4fa9703c86183de2c4060576573b3f49
- SHA1 90886afffe0df9793274af5f7ef4ae8220f39f08
- SHA512 ccb911d4f195501e6ff592c07c1bd44065e677d53094c759a9534f4dc3c182c2fc45c3ba640b3bb34c607e29381b4ca761be57e1048b663f3e6c1a0e3716dca6
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:pVOL4/gPXKCOkx2LFR
- TLSH T137C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa
- Size 560KB
- SHA256 1534ee844dee8ce9bcd801e66e396d81abbec38fd6ad68bd917c1575ab523efa
- MD5 4fa9703c86183de2c4060576573b3f49
- SHA1 90886afffe0df9793274af5f7ef4ae8220f39f08
- SHA512 ccb911d4f195501e6ff592c07c1bd44065e677d53094c759a9534f4dc3c182c2fc45c3ba640b3bb34c607e29381b4ca761be57e1048b663f3e6c1a0e3716dca6
- SSDEEP 12288:73Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YeLm08XsOkx2LIa+y:pVOL4/gPXKCOkx2LFR
- TLSH T137C46D2AB6E0D076C4B79574C4A256A6FFB1B43127204ACF6390475A1F637E2BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory