General
- Target 6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1
- Size 395KB
- Sample260802-flayvavdrc
- SHA256 6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1
- MD5 1ae45c9953766c7e7a6392a8eec1d75c
- SHA1 ff348d41bf0c2c7e7e046ecdd14e98be0dd95123
- SHA512 c3c38a7acc007230eaa02f57ed4fcefc410049ac7f578d767399a912ff96af9e41adf37b7d5a5e12e599966f18590fbd25255f26820069ea3532c1d60fb5a5df
- SSDEEP 12288:c3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:QVOL4/gPnKHOkx2LFE
- TLSH T166845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1.exe
Resource
win11ltsc2024-20260709-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1
- Size 395KB
- SHA256 6d84d310288d353b8d791d8c3576949ae4fbc268f2f155fd86a822040560b1e1
- MD5 1ae45c9953766c7e7a6392a8eec1d75c
- SHA1 ff348d41bf0c2c7e7e046ecdd14e98be0dd95123
- SHA512 c3c38a7acc007230eaa02f57ed4fcefc410049ac7f578d767399a912ff96af9e41adf37b7d5a5e12e599966f18590fbd25255f26820069ea3532c1d60fb5a5df
- SSDEEP 12288:c3Sgbu4VOGWPSqt6IpouYgCEmx1z725uRG9OArjlI6YmLm08dOkx2LIaxy:QVOL4/gPnKHOkx2LFE
- TLSH T166845C2AB6E0D076C4B79574C4A257A6FBB1B43227204ACF6390475A1F237E2BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory