General
- Target fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156
- Size 615KB
- Sample261012-ydr69set7y
- SHA256 fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156
- MD5 beb84ffa85d37febb5abf546f6e9c5f8
- SHA1 c19651ca13820cdb4ef999a56027c77698d6249f
- SHA512 05cf88f64d9e6c0233cc4201f1d604edc68223f61293be10e8df12a96eddd84fd35a65f68ec9bb88c64f85346b53cf7251064a22be7d37c4edd6830ed8be14f9
- SSDEEP 12288:PSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:6vO2xJKRI2FOkx2LFicUV
- TLSH T1FAD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156
- Size 615KB
- SHA256 fa834ea93d14fbf9e2799ed14dde027e4abc6059ef0a4a4ac65fbcb4cc90b156
- MD5 beb84ffa85d37febb5abf546f6e9c5f8
- SHA1 c19651ca13820cdb4ef999a56027c77698d6249f
- SHA512 05cf88f64d9e6c0233cc4201f1d604edc68223f61293be10e8df12a96eddd84fd35a65f68ec9bb88c64f85346b53cf7251064a22be7d37c4edd6830ed8be14f9
- SSDEEP 12288:PSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:6vO2xJKRI2FOkx2LFicUV
- TLSH T1FAD44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory