General
- Target 5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2
- Size 871KB
- Sample260919-1gpawsfm71
- SHA256 5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2
- MD5 c64e640233ec519c3759daec5fa726e9
- SHA1 2171d9de3afaf8e39024192b1c154654fe4d996f
- SHA512 627cd35d9b220d7227661666d5aae3be2047d8fca373fd9521f344ad1680aeea496409bc8c93f55f806f79ea282c130b9d0ea0b3ad0fe7a45a1f5bb3127a59b7
- SSDEEP 12288:eSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:dvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T181156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2.exe
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2
- Size 871KB
- SHA256 5250da687aefbe486656567fac8836aeb6724c13e62d78f98695e6a44c36d0a2
- MD5 c64e640233ec519c3759daec5fa726e9
- SHA1 2171d9de3afaf8e39024192b1c154654fe4d996f
- SHA512 627cd35d9b220d7227661666d5aae3be2047d8fca373fd9521f344ad1680aeea496409bc8c93f55f806f79ea282c130b9d0ea0b3ad0fe7a45a1f5bb3127a59b7
- SSDEEP 12288:eSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/LikGU5rCOTeidT:dvO2xJKRI2FOkx2LFEvcU6UQOJdT
- TLSH T181156B31E681C036D5B34571C6FA4BBBA9647D21531165CBA3C47A2A2FB37D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory