General
- Target 2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b
- Size 704KB
- Sample260907-lm7xvstejf
- SHA256 2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b
- MD5 ab5446c271985c50e34aeb8705e99bb0
- SHA1 200d73dd121f5b930f206bacac48f12d5d14c48e
- SHA512 2cc92a8b6ebb046a461575ef27a7208131b378748ce3b8ac62d3228863caf90e2d50317ddc4078f364ac2ea322daa19a5f328c03479d9c14a3e461aae8316520
- SSDEEP 12288:YSvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:zvO2xJKRI2FOkx2LFEF
- TLSH T1B0E46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b
- Size 704KB
- SHA256 2f91e19d626727a78643558d4973222bb271257271e83ea984f96e4c57d15c4b
- MD5 ab5446c271985c50e34aeb8705e99bb0
- SHA1 200d73dd121f5b930f206bacac48f12d5d14c48e
- SHA512 2cc92a8b6ebb046a461575ef27a7208131b378748ce3b8ac62d3228863caf90e2d50317ddc4078f364ac2ea322daa19a5f328c03479d9c14a3e461aae8316520
- SSDEEP 12288:YSvO2x9mONvKRILSFnOkx2LIaxy6RJ05r:zvO2xJKRI2FOkx2LFEF
- TLSH T1B0E46C26B7908136C477463585AB47A6EBB5BD11AB228B8F6340731D0F73793AE31B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory