General
- Target 3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52
- Size 560KB
- Sample260919-2ssm5acd39
- SHA256 3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52
- MD5 6eb90154d774fa3af9e49f9bb844eda0
- SHA1 e7a78ca78c07d895badf83edcd11527e91b3c292
- SHA512 f43c9b0b61abbe08baa943e0188098b486a7410cde545d74e3033ade9881c0e4a5701ee5107a13cb0dc503d6aaf408b1ffeda5b437e4ca933ce0e0155bd036fb
- SSDEEP 6144:34ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:3rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T109C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52
- Size 560KB
- SHA256 3caf2419edd25003d24dbdb22dc5105d525741f1d03770e93792d796b0bb9a52
- MD5 6eb90154d774fa3af9e49f9bb844eda0
- SHA1 e7a78ca78c07d895badf83edcd11527e91b3c292
- SHA512 f43c9b0b61abbe08baa943e0188098b486a7410cde545d74e3033ade9881c0e4a5701ee5107a13cb0dc503d6aaf408b1ffeda5b437e4ca933ce0e0155bd036fb
- SSDEEP 6144:34ZaN1cb90oOTFmIFLq0cvnXhLCqj2EFNirGcEOkCybEaQRuy8K:3rNOb9+sIF+0cvnXhLCqEsOkxHy
- TLSH T109C48D29B6E0C076C4B79578C4A186B6FAB17832372459CFA394075A1F337E2BA3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory