General
- Target 9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec
- Size 871KB
- Sample260903-lsajjszybv
- SHA256 9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec
- MD5 00d47e8d1ac931ee3e8b5f8c4b28940d
- SHA1 11b62de9b47b4a1c5bd84e9be0a730f9f92a94a1
- SHA512 1936189ec6adcedced29ae98986947aebaa5a7b796b06dc95fdeba6c680d827d678fc288550933bc8e387d96daa410ca0037a1721cb10b1cdc0a6e0b31a85a37
- SSDEEP 12288:TSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:mvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T11F156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec
- Size 871KB
- SHA256 9e57c6aec23e8bcefc3ecd5054ed56c96cf9caebc045ac85349b4632e0c38fec
- MD5 00d47e8d1ac931ee3e8b5f8c4b28940d
- SHA1 11b62de9b47b4a1c5bd84e9be0a730f9f92a94a1
- SHA512 1936189ec6adcedced29ae98986947aebaa5a7b796b06dc95fdeba6c680d827d678fc288550933bc8e387d96daa410ca0037a1721cb10b1cdc0a6e0b31a85a37
- SSDEEP 12288:TSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:mvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T11F156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory