General
- Target 0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec
- Size 640KB
- Sample260715-ynvedadw3n
- SHA256 0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec
- MD5 dd6951edf2f4fd92408f12f37e6fdb6d
- SHA1 b76a3a8e86ae6bd5d747785d74f9db4986ae624f
- SHA512 726e39bab7168099485478c9e1e35c96e1141c35916e208646d93e43ea136417a86d2b53c9297b1286afdce997c510ef630b0b0504d3dcf37712cdb6b2da6d93
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T151D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec
- Size 640KB
- SHA256 0666a6f9f17302746af12beb01f56c03285a5b24968772e7f7e5971351927eec
- MD5 dd6951edf2f4fd92408f12f37e6fdb6d
- SHA1 b76a3a8e86ae6bd5d747785d74f9db4986ae624f
- SHA512 726e39bab7168099485478c9e1e35c96e1141c35916e208646d93e43ea136417a86d2b53c9297b1286afdce997c510ef630b0b0504d3dcf37712cdb6b2da6d93
- SSDEEP 6144:scTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:sSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T151D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory