General
- Target 4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065
- Size 487KB
- Sample261017-g6lrhsa16w
- SHA256 4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065
- MD5 b2ac0b4e83fb8cf7cd6a16cb82febe5e
- SHA1 4700f2ef4b76f151b1511eae556679d9ccb31099
- SHA512 cd53fda2b7a60718cfae256d9b3e017d0a746f9d6f9fb4d782a58d25fbb9cea6049e86788d444653571c0e7641350fd80f9d1f341b854e293d7ba4aaa5ebb879
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KU5R2:3SvO2x9mONvKRILSFnOkx2LIaxya5g
- TLSH T1A9B45B26B6908036C0B78675C5F64BAAFAB5BC21631186CFA380365A1F737D2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065
- Size 487KB
- SHA256 4053445d647755b2713494f7f12f80dbfaa3e61f4027c93dac9cfc4d3421b065
- MD5 b2ac0b4e83fb8cf7cd6a16cb82febe5e
- SHA1 4700f2ef4b76f151b1511eae556679d9ccb31099
- SHA512 cd53fda2b7a60718cfae256d9b3e017d0a746f9d6f9fb4d782a58d25fbb9cea6049e86788d444653571c0e7641350fd80f9d1f341b854e293d7ba4aaa5ebb879
- SSDEEP 6144:3cTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOaxy8KU5R2:3SvO2x9mONvKRILSFnOkx2LIaxya5g
- TLSH T1A9B45B26B6908036C0B78675C5F64BAAFAB5BC21631186CFA380365A1F737D2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory