General
- Target 37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20
- Size 2.7MB
- Sample260908-21b1caaa25
- SHA256 37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20
- MD5 a34a654ef08af7e8aa433417fa14a7d7
- SHA1 f5e4eb0e1dc3e2d582e673d774366a91db7f055b
- SHA512 2c4a348a3074d00533914d2807c623f58bd5724fdf39e07067cf4d20022fdbcf557b634954eb6e2bc4d9820f0e7ea20deb4ffb57e7d5f304bc587cf3821e91b7
- SSDEEP 49152:AHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:AnKdVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T161D59E31B7818036D1B7467186FA47BBA5297C211711A5CFB3C47A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20
- Size 2.7MB
- SHA256 37be91e0ff2d16683e160f503a4e35b5888963c515574ec0c96ad798849fcd20
- MD5 a34a654ef08af7e8aa433417fa14a7d7
- SHA1 f5e4eb0e1dc3e2d582e673d774366a91db7f055b
- SHA512 2c4a348a3074d00533914d2807c623f58bd5724fdf39e07067cf4d20022fdbcf557b634954eb6e2bc4d9820f0e7ea20deb4ffb57e7d5f304bc587cf3821e91b7
- SSDEEP 49152:AHHKO29QG56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:AnKdVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T161D59E31B7818036D1B7467186FA47BBA5297C211711A5CFB3C47A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory