General
- Target c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8
- Size 395KB
- Sample261014-mt89yabx8x
- SHA256 c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8
- MD5 e139425e71a962830a6847717783995c
- SHA1 6f7d1abc5eded5b4c6c6d38270b7e91fb19a1ee5
- SHA512 9e65c11ecfba2e656d0534cb82fea9e21f2ce6ea8823e244def4a1ad843475079dd5f20519d05bf78503cf7677ac1f6ba9ddbaef0d90bac1e32b6bcfa32a8ec2
- SSDEEP 6144:kEreF1c/4o4hRHu8XLwaAJZDLOwuduFUcEOkCybEaQRXr9HNdvOaxy8K:kJFO/Mh7X8aA/DLOwuTOkx2LIaxy
- TLSH T1B9847C26F6A0C076C4779574C4A257AAFAB1B42277204ACFB390475A1F237E2BD3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8
- Size 395KB
- SHA256 c2fa94a8fab29dc4c0823bb4756f2808c7155f1ced153259385a5210dc68a6d8
- MD5 e139425e71a962830a6847717783995c
- SHA1 6f7d1abc5eded5b4c6c6d38270b7e91fb19a1ee5
- SHA512 9e65c11ecfba2e656d0534cb82fea9e21f2ce6ea8823e244def4a1ad843475079dd5f20519d05bf78503cf7677ac1f6ba9ddbaef0d90bac1e32b6bcfa32a8ec2
- SSDEEP 6144:kEreF1c/4o4hRHu8XLwaAJZDLOwuduFUcEOkCybEaQRXr9HNdvOaxy8K:kJFO/Mh7X8aA/DLOwuTOkx2LIaxy
- TLSH T1B9847C26F6A0C076C4779574C4A257AAFAB1B42277204ACFB390475A1F237E2BD3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory