General
- Target 948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191
- Size 832KB
- Sample261017-gpbj8aay7w
- SHA256 948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191
- MD5 88bea78eea5fb04438afaf3133790510
- SHA1 a81d528cda5867dc1b4fa7df332d27f0ceda26b4
- SHA512 8f94d5fdc2b0385d087a8b4f28214f6b4d8487c0d3ff14ab0e589666be69ecb046439bc1d9658234f04bcda3a9de013267bf8065c5f30b8ce1c0e824f957bb06
- SSDEEP 12288:SSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:5vO2xJKRI2FOkx2LFEAcUY
- TLSH T180056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191.exe
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191.exe
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191
- Size 832KB
- SHA256 948bc8ea89934dcf032aa38683c369f13bde6bd1c2eb4b72994769cc78add191
- MD5 88bea78eea5fb04438afaf3133790510
- SHA1 a81d528cda5867dc1b4fa7df332d27f0ceda26b4
- SHA512 8f94d5fdc2b0385d087a8b4f28214f6b4d8487c0d3ff14ab0e589666be69ecb046439bc1d9658234f04bcda3a9de013267bf8065c5f30b8ce1c0e824f957bb06
- SSDEEP 12288:SSvO2x9mONvKRILSFnOkx2LIaxy6RJ05FAQjU/LU:5vO2xJKRI2FOkx2LFEAcUY
- TLSH T180056C22F241C13AD4A7467185FE07ABA674BD10571257CBA3847B2A1FB36D2BE31B0D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory