General
- Target b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c
- Size 948KB
- Sample260903-21v38axfmc
- SHA256 b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c
- MD5 21380f4efd172245e5d0bc7e53ad648a
- SHA1 4706a5ffb1604d8478de948cb1088f926e7636ad
- SHA512 eb8cec9489f462da6cb6836d5754b4130cc0d777c0cb619c6ce1389d2f71c4563d9ac4832020cefd223d84ed80296227abfa417d867d5f37ac9c799b7b0f6b10
- SSDEEP 24576:6vO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJ:6HHKO2FQd1oOU82lPJ
- TLSH T152259D16F7A1C072C86742B448B6872EA671BC152B214ACBF7C07B5E4E727D1AE3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c
- Size 948KB
- SHA256 b98e69c4058636ebaecb1f75bc0bbb958a5e96fba4fb4f04f978ddd72a4d9d5c
- MD5 21380f4efd172245e5d0bc7e53ad648a
- SHA1 4706a5ffb1604d8478de948cb1088f926e7636ad
- SHA512 eb8cec9489f462da6cb6836d5754b4130cc0d777c0cb619c6ce1389d2f71c4563d9ac4832020cefd223d84ed80296227abfa417d867d5f37ac9c799b7b0f6b10
- SSDEEP 24576:6vO2xJKRI2dOkx2LFAAX1oOYSY82e5QPJJ:6HHKO2FQd1oOU82lPJ
- TLSH T152259D16F7A1C072C86742B448B6872EA671BC152B214ACBF7C07B5E4E727D1AE3634D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory