General
- Target bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f
- Size 395KB
- Sample260824-kk8wpsvcqb
- SHA256 bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f
- MD5 6ef670665cfe42bfd4cdee418e66e702
- SHA1 c8507e6925447e7af61bc8b92cda0a3714e82267
- SHA512 2eb8885402d9e270a865dc422e73b738fc808303f89a33cfc04bf4b92cc24460864729ce8b474a4c5a42c5b623feaf1a77b992342a898438220c55e2cecddc4e
- SSDEEP 6144:iQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:i39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1E7847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f
- Size 395KB
- SHA256 bb64a4b5955caed1f2454f7eb33f5f65fb3b567f60765dd87b3d8607c846550f
- MD5 6ef670665cfe42bfd4cdee418e66e702
- SHA1 c8507e6925447e7af61bc8b92cda0a3714e82267
- SHA512 2eb8885402d9e270a865dc422e73b738fc808303f89a33cfc04bf4b92cc24460864729ce8b474a4c5a42c5b623feaf1a77b992342a898438220c55e2cecddc4e
- SSDEEP 6144:iQtK91cOo9qoiTpppLeIUfdLyO2QFicEOkCybEaQRXr9HNdvOaxy8K:i39OFaPpKIUfdLyO8Okx2LIaxy
- TLSH T1E7847D2AB7A0D076C4B79579C49247AAFEB1B42137204ACFA390475A1F237E2BD3570D
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10Executes dropped EXE
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
Drops file in System32 directory