General
- Target 1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04
- Size 1.6MB
- Sample260901-zz49dsxemb
- SHA256 1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04
- MD5 cf143fa3e685e1212765cd412c1e8d72
- SHA1 04c1ea988ce1a162bf14578db409a9ff0f6bfb20
- SHA512 031f161c4ccde4824369abc531d7ae3e6fe8fe192416e9aedb14ad23b3a6abad4c71e67d642534cf67d0cd9ff4f8dcccdac33dfdeca4180f8c769e3b0bff0555
- SSDEEP 24576:NvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:NHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T19E759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04
- Size 1.6MB
- SHA256 1d879b9614ab91cabb89e916e3f6e813306650ca7ddfbcbbd5e0437f4b341d04
- MD5 cf143fa3e685e1212765cd412c1e8d72
- SHA1 04c1ea988ce1a162bf14578db409a9ff0f6bfb20
- SHA512 031f161c4ccde4824369abc531d7ae3e6fe8fe192416e9aedb14ad23b3a6abad4c71e67d642534cf67d0cd9ff4f8dcccdac33dfdeca4180f8c769e3b0bff0555
- SSDEEP 24576:NvO2xJKRI2FOkx2LFEvcUQPxuZ98Es8k3OH3C0rQ6+84FqoBsqMwLooSHazBvKRC:NHHKO29Qm5QZuTtS0rQM4PSxSFlv+a
- TLSH T19E759E22E341C072D567117146BA0B7EA938BE62077495C7E3D4FD752F722E2AA3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory