General
- Target d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78
- Size 3.3MB
- Sample260728-y3s5vsvekf
- SHA256 d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78
- MD5 9ba6c61482cda4772e1f3008a28a4ceb
- SHA1 4473745a4769ee2871b6b503e00763098423126e
- SHA512 4712dabed5880e65a3723f2240e59b8a897f197526c6e68790c875930f01ede8bb26bf54c6e5c7748544d507f57cd93b220c428499099db4215a55301fc8e9ca
- SSDEEP 24576:gvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:gHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T1C0F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78
- Size 3.3MB
- SHA256 d6d4c89f61945efc9fcb6d98a8a8a937ba923c407047b4c060097b0973305f78
- MD5 9ba6c61482cda4772e1f3008a28a4ceb
- SHA1 4473745a4769ee2871b6b503e00763098423126e
- SHA512 4712dabed5880e65a3723f2240e59b8a897f197526c6e68790c875930f01ede8bb26bf54c6e5c7748544d507f57cd93b220c428499099db4215a55301fc8e9ca
- SSDEEP 24576:gvO2xJKRI2dOkx2LFAC///wjHPOnOkx2LFhJbKkKF/eMNPjxdnQbzU:gHHKO2FQN///wTGHQd9KFeMxQbzU
- TLSH T1C0F54B12FB90C636D16A573048AB439A6BB5FD405B128BDF62D4B31F0F732869E31E58
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory