General
- Target 59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2
- Size 547KB
- Sample261006-xdds7stwa1
- SHA256 59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2
- MD5 c4ee9979ce17fcece54ab04e6a7d1627
- SHA1 a82315327713ea062a48b996a9b2705cae091f49
- SHA512 0a2e7aa8407d0bf2326f306607f23f3982e4d05dba0f064b5c875f8c8744fb59bbcc2122f161ed140eb2a68f22e0788b25bc56597ca0ed060d2d40bf8379be56
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:rSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T129C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2
- Size 547KB
- SHA256 59d88be1873d615b9d9e9fc2a438f4156f65b65834e92b8ab6392db6ba0bf1e2
- MD5 c4ee9979ce17fcece54ab04e6a7d1627
- SHA1 a82315327713ea062a48b996a9b2705cae091f49
- SHA512 0a2e7aa8407d0bf2326f306607f23f3982e4d05dba0f064b5c875f8c8744fb59bbcc2122f161ed140eb2a68f22e0788b25bc56597ca0ed060d2d40bf8379be56
- SSDEEP 6144:rcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KARG3:rSvO2x9mONvKRILSFnOkx2LIaxy6RY
- TLSH T129C47C27B6908236C4778675C4E647A6FBB5B511BB228B8F675083190F237D3BE21B1C
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory