General
- Target 4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f
- Size 766KB
- Sample260908-2wntcayvbt
- SHA256 4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f
- MD5 56b942640c7283bc20f0643d93db14ae
- SHA1 885ceccdd59a7ac6ff82f7859cf16d972f5caaf0
- SHA512 2af5caec33d31637ce3c3467369a82e87ebd15ae0a84f7a3bf7fdd5be81a8b4825630020b42c0d9d3fc6a5e2e6e2f092fff03ecf0cfc9c5b93a667492b0a242a
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T1C6F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f
- Size 766KB
- SHA256 4bf1f2eb33b04e54ce393186d6f0ccb32cf26cd3ca19112b6ef7abaf563c425f
- MD5 56b942640c7283bc20f0643d93db14ae
- SHA1 885ceccdd59a7ac6ff82f7859cf16d972f5caaf0
- SHA512 2af5caec33d31637ce3c3467369a82e87ebd15ae0a84f7a3bf7fdd5be81a8b4825630020b42c0d9d3fc6a5e2e6e2f092fff03ecf0cfc9c5b93a667492b0a242a
- SSDEEP 12288:uSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:NvO2xJKRw2kOkx2LFRvcUV
- TLSH T1C6F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory