General
- Target 6b6942ea0abb56141ed1ba837c7bf59adc1930a4f2d9a58d5ff0d76aa298ac8c
- Size 576KB
- Sample260820-p6vcna1sav
- SHA256 6b6942ea0abb56141ed1ba837c7bf59adc1930a4f2d9a58d5ff0d76aa298ac8c
- MD5 a967e07fb55e3b990d038c19e6ede2e4
- SHA1 382f98c410c161da9305b674908ef65c630a53fa
- SHA512 6f2608f93e7b015288880b81a3063cdc98c8491db432ccee2342a6635ddb11fffb2990a66ba5636e3a72e0b72d58422076358ac642fadeb6925ed3e36629133b
- SSDEEP 12288:RqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:RjHPOSOkx2LFscUQPK
- TLSH T1E5C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
6b6942ea0abb56141ed1ba837c7bf59adc1930a4f2d9a58d5ff0d76aa298ac8c.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target 6b6942ea0abb56141ed1ba837c7bf59adc1930a4f2d9a58d5ff0d76aa298ac8c
- Size 576KB
- SHA256 6b6942ea0abb56141ed1ba837c7bf59adc1930a4f2d9a58d5ff0d76aa298ac8c
- MD5 a967e07fb55e3b990d038c19e6ede2e4
- SHA1 382f98c410c161da9305b674908ef65c630a53fa
- SHA512 6f2608f93e7b015288880b81a3063cdc98c8491db432ccee2342a6635ddb11fffb2990a66ba5636e3a72e0b72d58422076358ac642fadeb6925ed3e36629133b
- SSDEEP 12288:RqXUHkUXe39sOkx2LIan5FAQjU/Lik8CQ3K:RjHPOSOkx2LFscUQPK
- TLSH T1E5C47C31E201C03AD1A74572C6FE0BAFA568BD24431562C7A3D479762FF72D2AA3171E
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory