General
- Target 38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232
- Size 1.7MB
- Sample261001-ykawkax15m
- SHA256 38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232
- MD5 f8af0e6f4c0893080cbd2a49ff6f0c65
- SHA1 0a19d29e62656da2233aa82990c93a3d629aa268
- SHA512 46233ca90ae7a38c5aaec5ac3d191f765fb2021e65a105c81602c309e38dce49e4fab715c29ec022f10e85fb21dad9b5a0b20aac5b14325529ad57a02a7d21a1
- SSDEEP 24576:/vO2xJKRI2FOkx2LFEWcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAI:/HHKO29Qr5QZuTtS0rQMYOQ+q8CEI
- TLSH T12F858E21B351C036D4AB05758ABA47AE9578BC310B2551C7B3C47B7E6FB22D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232
- Size 1.7MB
- SHA256 38f09eaa0c068cc6d5e2d259810cd5700442947c47df0a767788151d55c8a232
- MD5 f8af0e6f4c0893080cbd2a49ff6f0c65
- SHA1 0a19d29e62656da2233aa82990c93a3d629aa268
- SHA512 46233ca90ae7a38c5aaec5ac3d191f765fb2021e65a105c81602c309e38dce49e4fab715c29ec022f10e85fb21dad9b5a0b20aac5b14325529ad57a02a7d21a1
- SSDEEP 24576:/vO2xJKRI2FOkx2LFEWcUQPxuZ98Es8k3OH3C0rQ6+8pKJJFo3Q+qdCOKIbAI:/HHKO29Qr5QZuTtS0rQMYOQ+q8CEI
- TLSH T12F858E21B351C036D4AB05758ABA47AE9578BC310B2551C7B3C47B7E6FB22D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory