General
- Target 689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05
- Size 640KB
- Sample260806-k25klsgp4t
- SHA256 689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05
- MD5 f6dd373b621e32b4d37fb57542027edc
- SHA1 634752f236330aaa9218a615a0088287a7c5223b
- SHA512 ffaff3b80705f277cad36e55d4c2c8d36cd26d00db2ad9f35d6043e79da10ec4595033f9218e8ec416914f8602b2e0ce9ad0964dab8723d4ab500d4cc65b3dfa
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T135D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05
- Size 640KB
- SHA256 689498d1e60bb1793e385050962bf948b0ad84b16bf55f78e0f8292bd32c3b05
- MD5 f6dd373b621e32b4d37fb57542027edc
- SHA1 634752f236330aaa9218a615a0088287a7c5223b
- SHA512 ffaff3b80705f277cad36e55d4c2c8d36cd26d00db2ad9f35d6043e79da10ec4595033f9218e8ec416914f8602b2e0ce9ad0964dab8723d4ab500d4cc65b3dfa
- SSDEEP 6144:ucTgav1cdCTuoPbgwmOLJvKRwLSFXdFwirGcEOkCybEaQRuy8KU5Rc:uSvO2x9mONvKRwLSFtsOkxHya5+
- TLSH T135D45B35A6808036C0B74631C6F64BAAF9B5BC25631195CFA384376A1F737D2BA3570E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory