General
- Target e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e
- Size 560KB
- Sample260417-2zp6ksc19s
- SHA256 e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e
- MD5 0f461a8c145a69835edd76b3475fb840
- SHA1 a27d0b907f452f0738838cabc6f4a65c20dd017c
- SHA512 96778a13014005b8225b4c9613cd036adb0a313f3119c3b5e6da22232ab0279758d86c7e5aaca3019d88d77418017113dba752581922ba94dbdde6de588cf7f0
- SSDEEP 6144:+gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:+I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T19CC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e.exe
Resource
win10v2004-20260130-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e.exe
Resource
win11-20260130-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e
- Size 560KB
- SHA256 e6677c1d36aa30cc9a55d06ebf06c00b233e7ef0b60606284d82526e3ab0823e
- MD5 0f461a8c145a69835edd76b3475fb840
- SHA1 a27d0b907f452f0738838cabc6f4a65c20dd017c
- SHA512 96778a13014005b8225b4c9613cd036adb0a313f3119c3b5e6da22232ab0279758d86c7e5aaca3019d88d77418017113dba752581922ba94dbdde6de588cf7f0
- SSDEEP 6144:+gye71cE4poJTqvpQLXNKFyLWD1nFairGcEOkCybEaQRuy8K:+I7OE4kopQzNKFyLWDHsOkxHy
- TLSH T19CC48C2AB690C076C4B7D534C5E197AAEAB17432372449CFA3D0075A1F237E2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory