General
- Target ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293
- Size 395KB
- Sample260903-tfnjms1arg
- SHA256 ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293
- MD5 5e3a5b6d985a2a770126dbdee84c66ff
- SHA1 7b53f676c084f76aa50a69e766a3f8072b0e6670
- SHA512 20a67e1c1f3d78ec8aa7265e3d601b8e64f63ac6fc3396b90d74c35ae5ffa1a9bcfdccef7d99d26c5887a6f0453fefad91f4017fb3cf25d21d9d7d435f800e52
- SSDEEP 6144:SWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:SkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T11A846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293
- Size 395KB
- SHA256 ffa1b53743c99e02982ce896dbc46c8f49f36fbd26c73b507337869da6146293
- MD5 5e3a5b6d985a2a770126dbdee84c66ff
- SHA1 7b53f676c084f76aa50a69e766a3f8072b0e6670
- SHA512 20a67e1c1f3d78ec8aa7265e3d601b8e64f63ac6fc3396b90d74c35ae5ffa1a9bcfdccef7d99d26c5887a6f0453fefad91f4017fb3cf25d21d9d7d435f800e52
- SSDEEP 6144:SWVrC1c2oonALgPLj7vfFLKlOIFGcEOkCybEaQRXr9HNdvOaxy8K:SkCO2zVPX7vfFLKlwOkx2LIaxy
- TLSH T11A846B2AB6A0D036C4779574C4A257AAFFB1B42237204ACFA390475A1F237E2BD7531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory