General
- Target 6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd
- Size 896KB
- Sample260511-ysyycsds3r
- SHA256 6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd
- MD5 56e0ad61d553536925b2037e1f0fb744
- SHA1 e7c23ec0eb1bd8efd642ffdd33014abd829d53aa
- SHA512 f3b0b04c06931a9424a106db6867204ca4db25b5b58e5e6dcd3f624e7e95bd3caadb724018390ccadff6611f6f744b3ef1c9a1b4e6d0a92d361f301faca547c1
- SSDEEP 12288:8SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:PvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T115157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd.exe
Resource
win10v2004-20260130-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd.exe
Resource
win11-20260130-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd
- Size 896KB
- SHA256 6bbb3fcc43e878f9cbf7a7194915b4f5f2a85c0b1f16c3465c1634f83999fabd
- MD5 56e0ad61d553536925b2037e1f0fb744
- SHA1 e7c23ec0eb1bd8efd642ffdd33014abd829d53aa
- SHA512 f3b0b04c06931a9424a106db6867204ca4db25b5b58e5e6dcd3f624e7e95bd3caadb724018390ccadff6611f6f744b3ef1c9a1b4e6d0a92d361f301faca547c1
- SSDEEP 12288:8SvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:PvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T115157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory