General
- Target 55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67
- Size 3.3MB
- Sample260727-x18l4ach55
- SHA256 55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67
- MD5 101a7a62df0b400e5b8748ff9c0aed36
- SHA1 21acd7ae7f3dc9c1c0eb6ff1061752dbcb38ab1a
- SHA512 d3eb037fe5d643cbf77572c5a21da34619004799ffd9d9bf08d958f34ed350213cf0b6d080241589bdfe184dc26d14e31bc4ac991671e2415930b0412c1c7030
- SSDEEP 24576:svO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:sHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T169F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67
- Size 3.3MB
- SHA256 55d6a676c7d99897f08052fdf5453425c84ee298144ce7c8f662f4c42c7d8e67
- MD5 101a7a62df0b400e5b8748ff9c0aed36
- SHA1 21acd7ae7f3dc9c1c0eb6ff1061752dbcb38ab1a
- SHA512 d3eb037fe5d643cbf77572c5a21da34619004799ffd9d9bf08d958f34ed350213cf0b6d080241589bdfe184dc26d14e31bc4ac991671e2415930b0412c1c7030
- SSDEEP 24576:svO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:sHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T169F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory