General
- Target 8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4
- Size 560KB
- Sample260908-gmnf1aserc
- SHA256 8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4
- MD5 a51637497be063391deff8bdb951211d
- SHA1 a3991b447dd48d5d47dd01e21ea8b7cb80514e74
- SHA512 badec03ff33dc07a022507c4acce5bf8249e89f029215add10e2f80eabda1447f47fa3e8bb02dbad04c6de43f440c43e72ac32b3333de42f2b6924eb92b778eb
- SSDEEP 6144:JWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:JkCO2zVPX7vf1LKlIsOkxHy
- TLSH T180C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4
- Size 560KB
- SHA256 8125b9af1f9aab58e16b4e6db4ab81ff5ee2a61970e0f0ea824562b39d5868d4
- MD5 a51637497be063391deff8bdb951211d
- SHA1 a3991b447dd48d5d47dd01e21ea8b7cb80514e74
- SHA512 badec03ff33dc07a022507c4acce5bf8249e89f029215add10e2f80eabda1447f47fa3e8bb02dbad04c6de43f440c43e72ac32b3333de42f2b6924eb92b778eb
- SSDEEP 6144:JWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:JkCO2zVPX7vf1LKlIsOkxHy
- TLSH T180C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory