General
- Target 641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3
- Size 2.6MB
- Sample260808-xf6a8ssgpg
- SHA256 641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3
- MD5 8f632c62cd4f35851796cd6cd0c79474
- SHA1 dfbf68c089441bc38e405dfd458b37f62a8088c4
- SHA512 0c0caf7d275f934892c1927c4883a19e8f4a1270b262ac423996512f51e2581fac0c2a21f978aff101b41e6bb2626ef8b4f771b326a0748e2c0d39f5bfc40a26
- SSDEEP 49152:zTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:zKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1FEC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target 641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3
- Size 2.6MB
- SHA256 641751ec104da4e5605345bd532cb3490881b76824c1e0a0001e22a5f92259c3
- MD5 8f632c62cd4f35851796cd6cd0c79474
- SHA1 dfbf68c089441bc38e405dfd458b37f62a8088c4
- SHA512 0c0caf7d275f934892c1927c4883a19e8f4a1270b262ac423996512f51e2581fac0c2a21f978aff101b41e6bb2626ef8b4f771b326a0748e2c0d39f5bfc40a26
- SSDEEP 49152:zTGkQy56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtS0rQMYOF:zKkVkOhCXHHFZMjHfUKkVWsM0r1F
- TLSH T1FEC59F31B7818036D1B7427186FA47BBA5297C211715A5CF73C87A2A1FB36D2AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory