General
- Target ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957
- Size 1.7MB
- Sample260729-z6l2dsfa89
- SHA256 ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957
- MD5 de10376c6cffe0a373dae824d395b2ed
- SHA1 9566b1ff903b51e8e92d1ca1bd7531b3089e8301
- SHA512 4ab9fa01795ab30631d7dea8e43d9cf62b0081f247317d0c704ff98da53d7a0119ef2f65e00952e63d027013519e84a2e40433adc56ddc81c1fc06fca731d021
- SSDEEP 24576:wvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:wHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T12C858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957
- Size 1.7MB
- SHA256 ffb6cfd9aa1f8392bf892f2fd5c2c004c0600136df448882fd19e619a4b37957
- MD5 de10376c6cffe0a373dae824d395b2ed
- SHA1 9566b1ff903b51e8e92d1ca1bd7531b3089e8301
- SHA512 4ab9fa01795ab30631d7dea8e43d9cf62b0081f247317d0c704ff98da53d7a0119ef2f65e00952e63d027013519e84a2e40433adc56ddc81c1fc06fca731d021
- SSDEEP 24576:wvO2xJKRw2kOkx2LFRvcU6UQOJdBqsCPhH9Do2sOfNZMjHfUr:wHHKe2WQX56/OJdJCXDrsOFZMjHfUr
- TLSH T12C858D31AAC04132E2B3867585FA56F6A9257C222721E5CF62C57B291E737D3ED3070E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory