General
- Target d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154
- Size 832KB
- Sample260916-lnbaaahp7w
- SHA256 d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154
- MD5 87849795fae5ee8d297aa42b10eb9a19
- SHA1 f04ae9ef7e497867cc604e3337dfc5d6ee5897c5
- SHA512 9aed6f219ceef35ed397d3ba2a10977f545d8cbe0b1b1457c29abc8931b7ba8736407511c12cc9bb30bdcab36b12c8977f95de381e3d1974b14bc509c25dd909
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ZvO2xJKRI2FOkx2LFEAcUY
- TLSH T105056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154
- Size 832KB
- SHA256 d876f7c75ee103af2d336bd21ccc76ace636e6266ce095d258d7d8e22acf9154
- MD5 87849795fae5ee8d297aa42b10eb9a19
- SHA1 f04ae9ef7e497867cc604e3337dfc5d6ee5897c5
- SHA512 9aed6f219ceef35ed397d3ba2a10977f545d8cbe0b1b1457c29abc8931b7ba8736407511c12cc9bb30bdcab36b12c8977f95de381e3d1974b14bc509c25dd909
- SSDEEP 12288:ySvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:ZvO2xJKRI2FOkx2LFEAcUY
- TLSH T105056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory