General
- Target 1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b
- Size 766KB
- Sample260919-wh3gpaaa64
- SHA256 1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b
- MD5 0a6e2fe0bcfe173340e916925fc95dac
- SHA1 9391cb3b7c435f96b82b9559b3e5cbdba7c90e1a
- SHA512 9558008ef720e7979875bb5d1f02074ab4c4dc7f65e25e9cd3f8d7c8e96c26d76a5d555904fde51bee629133dd8929eee98257e6c8c0001c78fbea2fb4c98e1d
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T1E0F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b
- Size 766KB
- SHA256 1ee52e94ff7a8f308c47a3bfb2b00559ce956e755c554995f6bfbe895202fe3b
- MD5 0a6e2fe0bcfe173340e916925fc95dac
- SHA1 9391cb3b7c435f96b82b9559b3e5cbdba7c90e1a
- SHA512 9558008ef720e7979875bb5d1f02074ab4c4dc7f65e25e9cd3f8d7c8e96c26d76a5d555904fde51bee629133dd8929eee98257e6c8c0001c78fbea2fb4c98e1d
- SSDEEP 12288:XSvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:ivO2xJKRw2kOkx2LFRvcUV
- TLSH T1E0F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory