General
- Target e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0
- Size 2.5MB
- Sample260816-l1pcnsvelc
- SHA256 e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0
- MD5 ec4166b5c2e039bab3442a95f2b25ad9
- SHA1 7a72573902e54fe5fb6861059d2a380207a20dc1
- SHA512 30574e06bea9915a0f2efab030c2adf79eabe022d17a4249b50a5cbdaab9f1e085e51f23bdda0ae6024700932c543205b3198a6fa66086b24f7ee0862cb40db2
- SSDEEP 49152:zHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:znKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E4C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Behavioral task
behavioral1
Sample
e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0.exe
Resource
win11ltsc2024-20260709-en
10 signatures
150 seconds
Malware Config
Targets
-
- Target e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0
- Size 2.5MB
- SHA256 e6e33a659b22b271e79d14d28422d51b2e4cc6f80220a4a7b7d0cfe918d742b0
- MD5 ec4166b5c2e039bab3442a95f2b25ad9
- SHA1 7a72573902e54fe5fb6861059d2a380207a20dc1
- SHA512 30574e06bea9915a0f2efab030c2adf79eabe022d17a4249b50a5cbdaab9f1e085e51f23bdda0ae6024700932c543205b3198a6fa66086b24f7ee0862cb40db2
- SSDEEP 49152:zHHKe2WQX56/OJdJCXDrsOFZMjHfUTGkQy5QZuTtN:znKGEkOhCXHHFZMjHfUKkVWsT
- TLSH T1E4C58E31E6818136D1B34671C6FA57BBA5247C211721A5CFA3C87A2A1F736D3AE3170E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory