General
- Target 2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a
- Size 3.0MB
- Sample260908-dc6caabq5y
- SHA256 2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a
- MD5 8ac4165398d3a366c8d718de794e16f5
- SHA1 18fecbf10c19d7b112105a2c86135dda2812102f
- SHA512 560d6db07ac45c3a58becf73761db69aeb4104577630fd9fcbd4a88f9e47c1581bce28aa44a72f06da79c7f5331bf64191532c31d8fb599292268f3700a9da7c
- SSDEEP 49152:eHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:enKdBWsM0r1Qn1K4XKH40Feq
- TLSH T187E59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a
- Size 3.0MB
- SHA256 2909c29591eafa0e3f93a4f11c52cfbe91bb196e3be09111be9c0ffbade8946a
- MD5 8ac4165398d3a366c8d718de794e16f5
- SHA1 18fecbf10c19d7b112105a2c86135dda2812102f
- SHA512 560d6db07ac45c3a58becf73761db69aeb4104577630fd9fcbd4a88f9e47c1581bce28aa44a72f06da79c7f5331bf64191532c31d8fb599292268f3700a9da7c
- SSDEEP 49152:eHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMz:enKdBWsM0r1Qn1K4XKH40Feq
- TLSH T187E59D12F7A0C036C4A7027589BA476EA678BD614B2547CBB3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory