General
- Target ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81
- Size 395KB
- Sample260729-yxpkgs1gmb
- SHA256 ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81
- MD5 4585cde967bddb4a5b8a6d3416683aef
- SHA1 e822d9a830f8391ccf09bd1ff175233264d1c6a1
- SHA512 71fc228d1af8938a65325524c9caec0302992d7387acd55bce9b8e866967c231157affc0f49a82834db5c571e9bdcf01ca2af91189130c6b4d4b72b6f38ec41a
- SSDEEP 6144:HcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:HCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1F2846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81
- Size 395KB
- SHA256 ddc6a201da684db11a3f012faaf82533e050ec25e0fcf0a2f95b11dc988c8a81
- MD5 4585cde967bddb4a5b8a6d3416683aef
- SHA1 e822d9a830f8391ccf09bd1ff175233264d1c6a1
- SHA512 71fc228d1af8938a65325524c9caec0302992d7387acd55bce9b8e866967c231157affc0f49a82834db5c571e9bdcf01ca2af91189130c6b4d4b72b6f38ec41a
- SSDEEP 6144:HcbcTgav1cdCTuoPbgwmOLJvKRILSFvdFDcEOkCybEaQRXr9HNdvOa:HCSvO2x9mONvKRILSFnOkx2LIa
- TLSH T1F2846D2AB6A0D076C4B79579C4A247BAFBB1742137204ACFA390475A1F637E2BD3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory