General
- Target W_P_S_painoujletll_62479.exe
- Size 290.8MB
- Sample261020-s5fdwsbw6x
- SHA256 3b2ca2f49ca1a1b8627fc9a4965f810fb4b7a7aefd1dd7c97ee677ae0f26d86c
- MD5 a184902be144c530a5beafb1a4250d7d
- SHA1 28e62650a330d1ab9002515368a6c90b0b9e0f74
- SHA512 bad164b6f5bf86f98d21e61c6161d742972457801a302bdcb0b61d43ac57153ef5046a5f3ac9b4f78dba2c120aba42766cb9fc0653ae2b001c1e5aa44f35f370
- SSDEEP 6291456:8WIlspBigDlGDRojjcD200OmR+L05tUSEtPKty:8xlEbgtWIe3R+LADENKty
- TLSH T1BAE833B373C6A72CD8AE517D2C722F01A53B73E13B4D8D93C6B09948E9655F21A6CE04
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
W_P_S_painoujletll_62479.exe
Resource
win11-20260911-en
10 signatures
300 seconds
Malware Config
Targets
-
- Target W_P_S_painoujletll_62479.exe
- Size 290.8MB
- SHA256 3b2ca2f49ca1a1b8627fc9a4965f810fb4b7a7aefd1dd7c97ee677ae0f26d86c
- MD5 a184902be144c530a5beafb1a4250d7d
- SHA1 28e62650a330d1ab9002515368a6c90b0b9e0f74
- SHA512 bad164b6f5bf86f98d21e61c6161d742972457801a302bdcb0b61d43ac57153ef5046a5f3ac9b4f78dba2c120aba42766cb9fc0653ae2b001c1e5aa44f35f370
- SSDEEP 6291456:8WIlspBigDlGDRojjcD200OmR+L05tUSEtPKty:8xlEbgtWIe3R+LADENKty
- TLSH T1BAE833B373C6A72CD8AE517D2C722F01A53B73E13B4D8D93C6B09948E9655F21A6CE04
- MD5 SHA1 SHA512 SSDEEP TLSH
Executes dropped EXE
Loads dropped DLL
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.