General
- Target 41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc
- Size 511KB
- Sample260908-zn449ayamf
- SHA256 41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc
- MD5 39facd1e9f3d748a2a7b00221632b851
- SHA1 478b767542f5023f075e422b9f26bf33ba7c7c98
- SHA512 bebd15d8cbc2647ea6de69f8ea78a4c162a90b4645abe0ebe6cc571fe25db8588c1546939c2671d72b551b5e152d885e3423156c75b8cf697f3757671020651d
- SSDEEP 6144:NcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:NSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D2B45B26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc
- Size 511KB
- SHA256 41876704daf562b483c74b1d4d7fa5a3833fba59ccc9db58666d8eb73c31cbfc
- MD5 39facd1e9f3d748a2a7b00221632b851
- SHA1 478b767542f5023f075e422b9f26bf33ba7c7c98
- SHA512 bebd15d8cbc2647ea6de69f8ea78a4c162a90b4645abe0ebe6cc571fe25db8588c1546939c2671d72b551b5e152d885e3423156c75b8cf697f3757671020651d
- SSDEEP 6144:NcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:NSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T1D2B45B26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory