General
- Target 6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3
- Size 3.0MB
- Sample260801-x1kj9svbme
- SHA256 6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3
- MD5 e5a85ccb6591139e7999a412196a8851
- SHA1 379d4879eb191e3efb960af9571da90b136793c9
- SHA512 7cbda08476f01f28a9d474f27fe1de5efaf5b44fd4c8fb5a2dc622a32ed04bc52a1763bb89dfcc04be79cbff620b3299a540ecf5c6bec64c7b191be4d9a7486e
- SSDEEP 49152:pHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:pnKdBWsM0r1Qn1K4XKH40Feu
- TLSH T1EBE58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3
- Size 3.0MB
- SHA256 6a55ddec215e17f4343a0d41add4894582b79a39a21e671c8ee8b956f0c278f3
- MD5 e5a85ccb6591139e7999a412196a8851
- SHA1 379d4879eb191e3efb960af9571da90b136793c9
- SHA512 7cbda08476f01f28a9d474f27fe1de5efaf5b44fd4c8fb5a2dc622a32ed04bc52a1763bb89dfcc04be79cbff620b3299a540ecf5c6bec64c7b191be4d9a7486e
- SSDEEP 49152:pHHKO29QG5QZuTtS0rQMYOQ+q8CEOTG4QmTGHQv9KFeMj:pnKdBWsM0r1Qn1K4XKH40Feu
- TLSH T1EBE58E11F7A0C036C4AB027589BA476EA678FD614B2547CBA3C47B2E5F723D16E3530A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory