General
- Target 76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16
- Size 2.5MB
- Sample260920-1nttysdc53
- SHA256 76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16
- MD5 d27a8c54d58e56c1f4e2ecdbea6918f0
- SHA1 dad2d4a9643ea8bab1fb7107f78d781598b42997
- SHA512 d76c99b29a757651eb34888cce87a0faff65b0b202a312df2dc0a384ccd90f18716007ede9beaa87b4f0cc0f576e3809b37896805705f3b4633b30ae4e496dbf
- SSDEEP 49152:4HHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:4nKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T189C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16
- Size 2.5MB
- SHA256 76448fc802a83905fe395892550eb585735fc8351cebe96ddd1c80dcb8016d16
- MD5 d27a8c54d58e56c1f4e2ecdbea6918f0
- SHA1 dad2d4a9643ea8bab1fb7107f78d781598b42997
- SHA512 d76c99b29a757651eb34888cce87a0faff65b0b202a312df2dc0a384ccd90f18716007ede9beaa87b4f0cc0f576e3809b37896805705f3b4633b30ae4e496dbf
- SSDEEP 49152:4HHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:4nKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T189C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory