General
- Target 687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747
- Size 766KB
- Sample260920-23cdwsvsc1
- SHA256 687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747
- MD5 8a639a1c18b2273870e2d15cf263e17f
- SHA1 c120d89f7a89481b183946812241018357cd1e6b
- SHA512 a6a5a67765ea0112dfb22054923c8f5ddb29ae600fb8b7ef7a938df69574841abda1429f1ceff2bbb7a9b7afc02da7bf46b9f9c9d479aaf0e2612079f4c68159
- SSDEEP 12288:/SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:KvO2xJKRw2kOkx2LFRvcUV
- TLSH T172F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747
- Size 766KB
- SHA256 687cb4e56cbc28a0c102bd8ec2b1cde8b1aade7114fde853f295c8312574f747
- MD5 8a639a1c18b2273870e2d15cf263e17f
- SHA1 c120d89f7a89481b183946812241018357cd1e6b
- SHA512 a6a5a67765ea0112dfb22054923c8f5ddb29ae600fb8b7ef7a938df69574841abda1429f1ceff2bbb7a9b7afc02da7bf46b9f9c9d479aaf0e2612079f4c68159
- SSDEEP 12288:/SvO2x9mONvKRwLSFtsOkx2LIa+ya5FAQjU/Liw:KvO2xJKRw2kOkx2LFRvcUV
- TLSH T172F45A31E241C03AD0A74576C6FA0BAFE564BD25531155CBA3C43A6A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory