General
- Target 01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0
- Size 511KB
- Sample261009-yca7cssycx
- SHA256 01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0
- MD5 ab81ce090437cd6f3c1cd861b5388d40
- SHA1 545c2a567ae9ae3cb4a13072eec4d7c8f5749a70
- SHA512 cd7f35b6ee5080cec15c6c0e4604785adc2caf77dc25368ed48d462b9de0e5ea77e7fb2ec27d408c11d6a017526051de0ad7999bdcfd09c5c6a729bf7459a736
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:bSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T197B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0
- Size 511KB
- SHA256 01aa05522f8dcc7a0ac29619c0c0ffabeb11115921ff7c838ba1b26bf9e497e0
- MD5 ab81ce090437cd6f3c1cd861b5388d40
- SHA1 545c2a567ae9ae3cb4a13072eec4d7c8f5749a70
- SHA512 cd7f35b6ee5080cec15c6c0e4604785adc2caf77dc25368ed48d462b9de0e5ea77e7fb2ec27d408c11d6a017526051de0ad7999bdcfd09c5c6a729bf7459a736
- SSDEEP 6144:bcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOax5Rv0:bSvO2x9mONvKRILSFnOkx2LIax5F0
- TLSH T197B45C26F6908036C4B34575C5F64BAAFAB4BC21631156CBA3943A6A1F737D2BD3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory