General
- Target 5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a
- Size 419KB
- Sample261013-2raqxsds6m
- SHA256 5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a
- MD5 29fe0f01256135a6713e209c45bea30c
- SHA1 896afa3d82fb19983202e9a614281c851eebeb26
- SHA512 d9ea457c710bfae762cfcebebf8642e91292af5f6dea6ade8bd632486c1be83440cfdd09256e6a7be13a3958c89c739cf5d853fcd21799c1c70458d3e79549da
- SSDEEP 6144:X8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:sa+4EZe/uwqDvDOkx2LIa
- TLSH T18F948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a
- Size 419KB
- SHA256 5f9bc81399ddb01d12feeef5d8562a95dcfb1b798babc3df44970da384632c7a
- MD5 29fe0f01256135a6713e209c45bea30c
- SHA1 896afa3d82fb19983202e9a614281c851eebeb26
- SHA512 d9ea457c710bfae762cfcebebf8642e91292af5f6dea6ade8bd632486c1be83440cfdd09256e6a7be13a3958c89c739cf5d853fcd21799c1c70458d3e79549da
- SSDEEP 6144:X8a+AjLd9fSZLC/umZjqDvjZFXcEOkCybEaQRXr9HNdvOa:sa+4EZe/uwqDvDOkx2LIa
- TLSH T18F948D19FAA08036C5A38575C4A257A7FBB1752137209ACFA3A057561F237E3BD3630E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory