General
- Target 9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15
- Size 560KB
- Sample260922-llpd5ashmg
- SHA256 9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15
- MD5 89f152d8c06b0216f269210b47f516b7
- SHA1 2279187388e0894d6031521a85c17230aba08ef6
- SHA512 ee379a2f7a5781a33ee4b5e4a67087b188b92f8e4e65ff8ecbfa20890784be283f2c669bff385b1e9e739d6e603f08c7ee6ff91402d3639e3d3bf508ddbba2ec
- SSDEEP 6144:mWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:mkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A3C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15.exe
Resource
win11ltsc2024-20260911-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15
- Size 560KB
- SHA256 9d020eb6423ca6a59f1f0fd57d19c4204cd536a07b0bdd933245c3d1c6029e15
- MD5 89f152d8c06b0216f269210b47f516b7
- SHA1 2279187388e0894d6031521a85c17230aba08ef6
- SHA512 ee379a2f7a5781a33ee4b5e4a67087b188b92f8e4e65ff8ecbfa20890784be283f2c669bff385b1e9e739d6e603f08c7ee6ff91402d3639e3d3bf508ddbba2ec
- SSDEEP 6144:mWVrC1c2oonALgPLj7vf1LKlyIFVirGcEOkCybEaQRuy8K:mkCO2zVPX7vf1LKlIsOkxHy
- TLSH T1A3C47C29B690D076C4779574C4A187AAFAB1B432372449CFB3D00B5A1F237E2BA7530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory