General
- Target 1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef
- Size 832KB
- Sample260909-jcahhatelf
- SHA256 1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef
- MD5 82cb423d811d9527bb328c972857e9e7
- SHA1 f00c5103aa8b3b95ad53684bf32a6560344e2474
- SHA512 07ba20f7e414283b200ae32b6d9be580e5147e41541daf4bd5857e0cf2b6c697571a610122c0b47b5121a991cce27851a33c79ce78c7214c620dc8370f468d31
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:HvO2xJKRI2FOkx2LFEAcUY
- TLSH T1DE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef
- Size 832KB
- SHA256 1bf1cfcb5eabb25c93d8ecea163286a8406be9db9c89b99e9661dd903d7188ef
- MD5 82cb423d811d9527bb328c972857e9e7
- SHA1 f00c5103aa8b3b95ad53684bf32a6560344e2474
- SHA512 07ba20f7e414283b200ae32b6d9be580e5147e41541daf4bd5857e0cf2b6c697571a610122c0b47b5121a991cce27851a33c79ce78c7214c620dc8370f468d31
- SSDEEP 12288:0SvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:HvO2xJKRI2FOkx2LFEAcUY
- TLSH T1DE056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory