General
- Target ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f
- Size 679KB
- Sample260714-ywptvsfv2v
- SHA256 ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f
- MD5 33473b7388a114843c4309d916bc2931
- SHA1 c6af9df9c6f630f956b3cd9b8a4224074c9f2234
- SHA512 3ce5e336383af7efc63dbb50d78028fd782c39df219caaabcfe711041fcf500dda45733b7be89c613373301974fa43809d1d8a3b6c36cc569333000061d68e87
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:FvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1A3E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f.exe
Resource
win11ltsc2024-20260710-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f
- Size 679KB
- SHA256 ecede4c7db0e317d57ac037d9b0b476f6b812b3b4efa64e938aa9414fe73b97f
- MD5 33473b7388a114843c4309d916bc2931
- SHA1 c6af9df9c6f630f956b3cd9b8a4224074c9f2234
- SHA512 3ce5e336383af7efc63dbb50d78028fd782c39df219caaabcfe711041fcf500dda45733b7be89c613373301974fa43809d1d8a3b6c36cc569333000061d68e87
- SSDEEP 12288:mSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3K:FvO2xJKRI2FOkx2LFEvcUQPK
- TLSH T1A3E45A31E641C036D4A74576C6FA0BBFE964BD25131165CBA3C43A262FB36D2BA3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory