General
- Target 91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747
- Size 374KB
- Sample260905-bw6faacr5y
- SHA256 91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747
- MD5 721b56ffa5b4419794d0921cfd79d404
- SHA1 40ffbed47df4b68539d78d148909e146c6f38fbd
- SHA512 b5746294dd913a35e4b9d9d453359be0081d92b9fa08501f52b1de22dfa660244f38cf0cd6e4a683e3323b153d6ea3320e577d22b13bfa63d63ebaf01a5971a6
- SSDEEP 6144:PcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8K:PSvO2x9mONvKRILSFnOkx2LIaxy
- TLSH T14A846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747
- Size 374KB
- SHA256 91938af22f10188a561c6765d56a54c17ee509da0002c81758843427c99c8747
- MD5 721b56ffa5b4419794d0921cfd79d404
- SHA1 40ffbed47df4b68539d78d148909e146c6f38fbd
- SHA512 b5746294dd913a35e4b9d9d453359be0081d92b9fa08501f52b1de22dfa660244f38cf0cd6e4a683e3323b153d6ea3320e577d22b13bfa63d63ebaf01a5971a6
- SSDEEP 6144:PcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8K:PSvO2x9mONvKRILSFnOkx2LIaxy
- TLSH T14A846D2AF6A0D076C4B79579C4A257AAFBB1742137204ACFA390475A1F237E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory