General
- Target 6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4
- Size 525KB
- Sample260801-xz2gdsff42
- SHA256 6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4
- MD5 8502e509f6a463cbbfb5fe2671a8ed31
- SHA1 157199785246b5eea022ccd37f9aea43f7698d9d
- SHA512 33c5e44c2e76005641d7e4e26ef9a55c17e1988f9f83d06444dd76e3232b17c1cf6735bd992fdc579ecba60425accce0457797cab489eb9e6de00b102b8a8e41
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:5SvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1C0B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4
- Size 525KB
- SHA256 6ef7b45fb752af1d01cf5351bcdf69d1e244bdde161d2826c7fc88cb07c4c7e4
- MD5 8502e509f6a463cbbfb5fe2671a8ed31
- SHA1 157199785246b5eea022ccd37f9aea43f7698d9d
- SHA512 33c5e44c2e76005641d7e4e26ef9a55c17e1988f9f83d06444dd76e3232b17c1cf6735bd992fdc579ecba60425accce0457797cab489eb9e6de00b102b8a8e41
- SSDEEP 6144:5cTgav1cdCTuoPbgwmOLJvKRhLSFXdFwirGcEOkCybEaQRXr9HNdvOaey8K:5SvO2x9mONvKRhLSFtsOkx2LIaey
- TLSH T1C0B47D2AB6A0D076C4779579C4A257BAFBB1742137204ACFA390475A1F237E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory