General
- Target 9d0ca0685adf01d4688c8b2b2c544a4d54b07e4fbf7f600231b95937f170a437.zip
- Size 809KB
- Sample261027-be148szzcx
- SHA256 be834517e0e0a283ab03b590cacfe4ff9f4f6ec7c07923b7b84ccb22598670e4
- MD5 e89f91ca74e287f96a1240dcf183cf57
- SHA1 6d5b45b5335adda29540840e69041b8943319796
- SHA512 3551d8eadbc5d57b6c44f4090174b41371c5db30d34a086fd0ecf2c9dda33af8e68c8874fbd916368669dbd8397be12a06aa230b067c6ee9cf0393feb5c4b480
- SSDEEP 24576:9cinGh4jfeRuqYstN/4Fghxbt6+9LWosEAlnxsNCTfpMQ+Gv8VI9C:9BTfeOsZhxbt6gWjEAz7fpfjv869C
- TLSH T121053398D491419DF931BE5828C6D680F2ACDF607E4A23B4E01B60FD472BD7BD4F2998
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
9d0ca0685adf01d4688c8b2b2c544a4d54b07e4fbf7f600231b95937f170a437.dll
Resource
win10v2004-20260911-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
9d0ca0685adf01d4688c8b2b2c544a4d54b07e4fbf7f600231b95937f170a437.dll
Resource
win11ltsc2024-20260911-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 9d0ca0685adf01d4688c8b2b2c544a4d54b07e4fbf7f600231b95937f170a437
- Size 5.0MB
- SHA256 9d0ca0685adf01d4688c8b2b2c544a4d54b07e4fbf7f600231b95937f170a437
- MD5 e874f96f56ed4f872ef6dbd0e435ba4a
- SHA1 77cd4c5d44260add8246fb3dc735cd9aff362ed9
- SHA512 2462f040d6fceea2e80b4f2b17f6ab6aa3c7f88175644a37ac737e8765f93d2fdeac7597859a9dd0ab97730819f0e64df1de7cc92b4244be39dfd098f380c283
- SSDEEP 24576:JbLgdeQhfdmYGH37byMgz6626M+vbOSSqTPVXmiHkQg6:JnjQqaAx+TSqTdX1HkQ
- TLSH T1A836C61076F82209E7B36FB015B957281BB6BE4A9C53838E16A4714E1C33F54DE7273A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10-
Contacts a large (3363) amount of remote hosts
This may indicate a network scan to discover remotely running services.
-
Executes dropped EXE
-
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.