General
- Target 061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e
- Size 640KB
- Sample260529-e5cq4sc13w
- SHA256 061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e
- MD5 18aa7ad67d48f53d5654b277e0473421
- SHA1 7a94b3420d92f4a75f643478eef30b311834d01d
- SHA512 f3a9ba0c576ab850f700f0becc06bf6d9e0e34e1d849aeec0e36ccd641fc2d5cf373375e883c5aae38f250f9bec2267ac7f680381fca4e071d489706f096dac4
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12ED45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e.exe
Resource
win11-20260513-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e
- Size 640KB
- SHA256 061a732621957962316ff7ef2b0f06689e2bd234afdbfe5799c00ac89b30bb0e
- MD5 18aa7ad67d48f53d5654b277e0473421
- SHA1 7a94b3420d92f4a75f643478eef30b311834d01d
- SHA512 f3a9ba0c576ab850f700f0becc06bf6d9e0e34e1d849aeec0e36ccd641fc2d5cf373375e883c5aae38f250f9bec2267ac7f680381fca4e071d489706f096dac4
- SSDEEP 6144:fcTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:fSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T12ED45B35A6808036C0B74631C6F64BAAF9B5BC21631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory