General
- Target 9241024468ed24908cb7c02dab8eb22a63eaa6d9c8f4b50609c7a17bb4e43d13.zip
- Size 3.1MB
- Sample261027-bb6kjsxv5q
- SHA256 2c006c397ee0782c74e61287dc70a8be9b03483c1da41fb0d58aee9ffc3da02f
- MD5 0aa8e539a0f0f5d58b679186732c8fc3
- SHA1 c775a836aed0d74b564ab887ee120387ccbbe29c
- SHA512 dc52bc2a174df1484bc723fb9039b00b131c2f53ea53caca64e56961b294553898d34f5799b2ad5b2ac366c383e1e3e235c0a78355d66993d419037e9148615c
- SSDEEP 98304:Ib4c1HaLxUyQWJ16QWA+o+DIvvP/ropk8tV73VR:DmHa1UyQWiQR+o+kHbomcl3VR
- TLSH T15CE533AEF4979154DC21D183B4ABB0A8621D4402D1993CD4B537CB7E2AA7EED3F3C861
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9241024468ed24908cb7c02dab8eb22a63eaa6d9c8f4b50609c7a17bb4e43d13.dll
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
9241024468ed24908cb7c02dab8eb22a63eaa6d9c8f4b50609c7a17bb4e43d13.dll
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 9241024468ed24908cb7c02dab8eb22a63eaa6d9c8f4b50609c7a17bb4e43d13
- Size 5.0MB
- SHA256 9241024468ed24908cb7c02dab8eb22a63eaa6d9c8f4b50609c7a17bb4e43d13
- MD5 eaac38962465059404da8307a3320d24
- SHA1 ebdcb420e86febda4c6e478e1a8e2a20df2c6058
- SHA512 4950ea740e41116aa435b99edb7814e5540aaec334f68a1bf41e8c9d90acb849418182e4ecf033cf3e7944a2366cef9076d4eff77ba377824432005a02c08e28
- SSDEEP 98304:+DqPoBhz1aRxcSUDk36SAEdhvxWa9PC3R8HSa:+DqPe1Cxcxk3ZAEUadsR8HSa
- TLSH T17F3612037285D165D0181A394C67CAECA6E3FCD5FE2E940B7ED1734F2973A86EA41B12
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (3369) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.