General
- Target 6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91
- Size 2.6MB
- Sample260801-2y484sab68
- SHA256 6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91
- MD5 2524d5a0bcfbb0c8ea63684354a0e092
- SHA1 74ab4c820e33ba8d4d5775cb3065fd796770d5c2
- SHA512 cd508025ac9b163c308bea442f59dd4dfef01649f1468b59b27c2f5f3c1f989686a4b19c0510334b45415b04c3e3f66bd1f41c7bc39bd361b720653c7f28957b
- SSDEEP 49152:nHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQd5QZuTtS0rQv:nnKl2qOb2lP8ssYoJxKkyWsM0rM
- TLSH T154D5BF21F761C036C4A7017189BA876FA678BD2507255AC7E3C43E6A5FB22D1BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91
- Size 2.6MB
- SHA256 6e6b9de94ad2c7e4590190246f448fd08a0cd1a069dfc2e501eefa9509ceca91
- MD5 2524d5a0bcfbb0c8ea63684354a0e092
- SHA1 74ab4c820e33ba8d4d5775cb3065fd796770d5c2
- SHA512 cd508025ac9b163c308bea442f59dd4dfef01649f1468b59b27c2f5f3c1f989686a4b19c0510334b45415b04c3e3f66bd1f41c7bc39bd361b720653c7f28957b
- SSDEEP 49152:nHHKO2FQd1oOU82lPJ6PsfsCWFn5+ovhnFvTGkQd5QZuTtS0rQv:nnKl2qOb2lP8ssYoJxKkyWsM0rM
- TLSH T154D5BF21F761C036C4A7017189BA876FA678BD2507255AC7E3C43E6A5FB22D1BE3530E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory