General
- Target 212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd
- Size 1.3MB
- Sample260901-zz49dsbk8w
- SHA256 212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd
- MD5 605a6c4945601a615677da7bcdea1ca7
- SHA1 b6fd7a89b30aa677818b40fdf7b835fd3528b3c6
- SHA512 a5a2433c5055a7bfd7c43004e3e43f404738ca54b9da333791d1988256fb414c336921009b8b0f74e41c53d884ec44dbf5faf0d1a9e38fe0635f3710fa217b94
- SSDEEP 24576:mvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:mHHKO29QG56/OJdJCXDrsl
- TLSH T13A559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd
- Size 1.3MB
- SHA256 212ba7ff60064b365e47259ae7efb5ff913cca86dd79041bbfcf8e30157f29fd
- MD5 605a6c4945601a615677da7bcdea1ca7
- SHA1 b6fd7a89b30aa677818b40fdf7b835fd3528b3c6
- SHA512 a5a2433c5055a7bfd7c43004e3e43f404738ca54b9da333791d1988256fb414c336921009b8b0f74e41c53d884ec44dbf5faf0d1a9e38fe0635f3710fa217b94
- SSDEEP 24576:mvO2xJKRI2FOkx2LFEvcU6UQOJdBqsCPhH9Do2sl:mHHKO29QG56/OJdJCXDrsl
- TLSH T13A559E32A6808036E5B3467586FA57BAA5257C215321E1CF73C47A2E1FB37D3A93170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory