General
- Target 6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf
- Size 395KB
- Sample260807-t18qbagh35
- SHA256 6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf
- MD5 d65a41326155f72d2250d41453e5af4f
- SHA1 24af925ade7a161f719375e59f5d662e39af782b
- SHA512 c532cd9e225f46121437aba490ccdf579258fe9dcb2e23af9b5ce31dd61d6438427c5ab6cdbc0b9a1560af394ebf73fb1d2ff65c153d3836fb8b14d151afc10c
- SSDEEP 6144:kg/AL1cVUoG1XRlL0wcJtL2KmEFEcEOkCybEaQRXr9HNdvOaty8K:knLOVWLlowcJtL2KyOkx2LIaty
- TLSH T10E847C26F6A08036C5B79578C4A396A6FFB1742137248ACFA390475A1F237E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf
- Size 395KB
- SHA256 6d4d8343b5c486818cc05cc2166ae5185e33ce1df1d1c18532936e063d68e2cf
- MD5 d65a41326155f72d2250d41453e5af4f
- SHA1 24af925ade7a161f719375e59f5d662e39af782b
- SHA512 c532cd9e225f46121437aba490ccdf579258fe9dcb2e23af9b5ce31dd61d6438427c5ab6cdbc0b9a1560af394ebf73fb1d2ff65c153d3836fb8b14d151afc10c
- SSDEEP 6144:kg/AL1cVUoG1XRlL0wcJtL2KmEFEcEOkCybEaQRXr9HNdvOaty8K:knLOVWLlowcJtL2KyOkx2LIaty
- TLSH T10E847C26F6A08036C5B79578C4A396A6FFB1742137248ACFA390475A1F237E2BD3531D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory