General
- Target 6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798
- Size 560KB
- Sample260808-31a9gswgla
- SHA256 6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798
- MD5 b2291922976e2b3c05d7c142c7511491
- SHA1 937ee7375ddad9232a0df9660f2e698235fe3681
- SHA512 113acd6fab255ec922743899d3c782958fe25f2e10da7aac9f513e3d4e1ae17526b05171040e0f06eba8fb16732460599b168c1e722b0b9282d35d276c85c373
- SSDEEP 6144:M6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:MO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T149C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798
- Size 560KB
- SHA256 6d72ad304329c90e8aef5dc24169098cc73e9160171808f07e89f102e6949798
- MD5 b2291922976e2b3c05d7c142c7511491
- SHA1 937ee7375ddad9232a0df9660f2e698235fe3681
- SHA512 113acd6fab255ec922743899d3c782958fe25f2e10da7aac9f513e3d4e1ae17526b05171040e0f06eba8fb16732460599b168c1e722b0b9282d35d276c85c373
- SSDEEP 6144:M6UE71cqQEoMr5C2iKLJChYSvL+8xPFxirGcEOkCybEaQRXr9HNdvOa+y8K:MO7OqQs42iKFChYSvL+8AsOkx2LIa+y
- TLSH T149C46C26B6A0D076C4B79574C4A28BA6FFB1742227244BCFA39047561F637E2BE3530D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory