a7c279bba8d6a6f5f3edab548da783791940cccb59a409afe9b66ded987e26d0

Analysis

user interaction
yes
max time kernel
95s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
28/09/2026, 15:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
flood.exe
Size 138KB
Sample260928-sppbvsbd97
SHA256 a7c279bba8d6a6f5f3edab548da783791940cccb59a409afe9b66ded987e26d0
MD5 fb33b6623aece8f8c9f85a289dc4dd89
SHA1 42f97b997e93c8abd53a28d223b40638bd12b7a6
SHA512 69dda2ce6b5db5293ec3faaca52187b8dba406f05bf9afb80ec3f7e572d3910afe861ced00c7329bfe2343bf33b48f29d632c5c774076006806244ab2f844811
SSDEEP 3072:m+k5Q2VQiMmY7NRbO/KcMLTcmyJP5L5jHq98i7UC7wk:TZuk9yJP5L5u77UC7wk
TLSH
T166D309B5B6E68C9ADA7B52B456CAD6B2333CFEE04312A747021015713F17A903EDE2D1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

discovery

Malware Config

Signatures

Creates a large amount of network flows 1 TTPs
This may indicate a network scan to discover remotely running services.
discovery

Network Service Discovery
T1046

Unexpected DNS network traffic destination 1 IoCs

Network traffic to other servers than the configured DNS servers was detected on the DNS port.

description	flow	ioc	pid	Process
Destination IP	9677	193.161.193.99	2952	flood.exe

C:\Users\Admin\AppData\Local\Temp\flood.exe
"C:\Users\Admin\AppData\Local\Temp\flood.exe"
1⤵
- Unexpected DNS network traffic destination
PID:2952

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Service Discovery

T1046

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

memory/2952-0-0x00007FF7A01B0000-0x00007FF7A01E5000-memory.dmp

Download