General
- Target d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3
- Size 419KB
- Sample261011-s2mc2atvas
- SHA256 d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3
- MD5 9fc7a0da223d42ad89b30ae352063ee0
- SHA1 d33a5f3d5b939ddb339c912f0cdbaf4c6bf422c2
- SHA512 68129e8e0a33918a16899a9c7ab25554136898a1d8d73906d8edaf0f624cf04c1bfc3d50a96e7916b34a93d2f3e474fd5be871c42fd493ce958fb9720c83db7c
- SSDEEP 6144:66DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:66D/WiA3YcyVDLjOkx2LIa
- TLSH T1DF947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3
- Size 419KB
- SHA256 d5b252de17c3f89de0995ac1e5d7990a24b5d4afaf6e5a8dbf9b091660575fe3
- MD5 9fc7a0da223d42ad89b30ae352063ee0
- SHA1 d33a5f3d5b939ddb339c912f0cdbaf4c6bf422c2
- SHA512 68129e8e0a33918a16899a9c7ab25554136898a1d8d73906d8edaf0f624cf04c1bfc3d50a96e7916b34a93d2f3e474fd5be871c42fd493ce958fb9720c83db7c
- SSDEEP 6144:66DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:66D/WiA3YcyVDLjOkx2LIa
- TLSH T1DF947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory