General
- Target de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961
- Size 560KB
- Sample260908-a8khxaxtdy
- SHA256 de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961
- MD5 390d7d4b9e9647e13ff5623aed3b2eb6
- SHA1 ba5231ccf3a9710d92228130675b63dd019d0d51
- SHA512 14dca7e5aa9eeb7210c511cef78bfd2f378cb647bd1e6afbea603c12aa57c075bed61f1006f9a5ed55c989ffa2d4e3f419fb878919268ccc09845e48be5afb0a
- SSDEEP 6144:E4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ErNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T195C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961.exe
Resource
win11ltsc2024-20260710-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961
- Size 560KB
- SHA256 de8d9f947d19535fea957741d55147005e930b0cd2c3728714d8072173ecf961
- MD5 390d7d4b9e9647e13ff5623aed3b2eb6
- SHA1 ba5231ccf3a9710d92228130675b63dd019d0d51
- SHA512 14dca7e5aa9eeb7210c511cef78bfd2f378cb647bd1e6afbea603c12aa57c075bed61f1006f9a5ed55c989ffa2d4e3f419fb878919268ccc09845e48be5afb0a
- SSDEEP 6144:E4ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:ErNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T195C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory