General
- Target 4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b
- Size 5.0MB
- Sample261107-p1ttyayvbz
- SHA256 4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b
- MD5 bfe2764e985deee015d1ceff856b8354
- SHA1 4956756d249b85cb06534ea364e5ea3b8cb8a737
- SHA512 84b8c9d540a328a21152613a16191b2ee8984b7008ed003d6fe9971262a437e3ecab1b435fc087d56619d2d5c3f15aa8065711d03eac1755ff7b9170531de231
- SSDEEP 49152:RnxQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:16qPoBhz1aRxcSUDk36SA
- TLSH T10436E115A1E86B64E7F36EB2217B871007797E45889B925E1760A04F0C33F5CDEE2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b.dll
Resource
win10v2004-20260911-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b.dll
Resource
win11ltsc2024-20260911-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b
- Size 5.0MB
- SHA256 4fa488a9e838003845b7944a0189ec4a7b74dfad454e4efc2a7b2f6cc50bdb0b
- MD5 bfe2764e985deee015d1ceff856b8354
- SHA1 4956756d249b85cb06534ea364e5ea3b8cb8a737
- SHA512 84b8c9d540a328a21152613a16191b2ee8984b7008ed003d6fe9971262a437e3ecab1b435fc087d56619d2d5c3f15aa8065711d03eac1755ff7b9170531de231
- SSDEEP 49152:RnxQqMSPbcBVQej/1INRx+TSqTdX1HkQo6SAA:16qPoBhz1aRxcSUDk36SA
- TLSH T10436E115A1E86B64E7F36EB2217B871007797E45889B925E1760A04F0C33F5CDEE2F29
- MD5 SHA1 SHA512 SSDEEP TLSH
Score10/10Contacts a large (3367) amount of remote hosts
This may indicate a network scan to discover remotely running services.
Executes dropped EXE
Creates a large amount of network flows
This may indicate a network scan to discover remotely running services.