General
- Target 6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48
- Size 615KB
- Sample260807-ryjx3afm7x
- SHA256 6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48
- MD5 6f85a5cf9ff4fbbe667e7fdf89a3305b
- SHA1 37ef8a4cb01b8afdd426ea0e8c34f5705fff2800
- SHA512 14c997fec33b74bc9eea83c6686597d48d57c1c5438eff588d2a76096914c88be769cbfcc76b38fc22c5375eea3a40430bab857e0bb70ac76d258220d72358f7
- SSDEEP 12288:QSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:LvO2xJKRI2FOkx2LFicUV
- TLSH T1FED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48
- Size 615KB
- SHA256 6ff5d7216330451c0042c9384a38a89000800f1e35c2741ee3eed02c85c52e48
- MD5 6f85a5cf9ff4fbbe667e7fdf89a3305b
- SHA1 37ef8a4cb01b8afdd426ea0e8c34f5705fff2800
- SHA512 14c997fec33b74bc9eea83c6686597d48d57c1c5438eff588d2a76096914c88be769cbfcc76b38fc22c5375eea3a40430bab857e0bb70ac76d258220d72358f7
- SSDEEP 12288:QSvO2x9mONvKRILSFnOkx2LIax5FAQjU/Liw:LvO2xJKRI2FOkx2LFicUV
- TLSH T1FED44A31E241C03AD4A74576C6FA0BAFE5647D25531165CBA3C43A2A2FB36D2BE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory