General
- Target d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f
- Size 419KB
- Sample260824-llcqbs1vcs
- SHA256 d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f
- MD5 246ca1358c5c58064b4e153b08eb90bd
- SHA1 a5f8e493a76e3e104f4a8c0a2ebf1dd3d730f3d0
- SHA512 181378c7ee3e4294026e1adfbf3772b192a735439705cf0f720183132e192cd656613972936ffc9caedf6926619baa802ca2391d3640b4987327f294fde2c4ce
- SSDEEP 6144:K6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:K6D/WiA3YcyVDLjOkx2LIa
- TLSH T10B947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f.exe
Resource
win10v2004-20260513-en
9 signatures
150 seconds
Behavioral task
behavioral2
Sample
d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f.exe
Resource
win11ltsc2024-20260710-en
9 signatures
150 seconds
Malware Config
Targets
-
- Target d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f
- Size 419KB
- SHA256 d643b6352bcd666d77203ab40db3f299348d3b777db4406c04ef26d7251d574f
- MD5 246ca1358c5c58064b4e153b08eb90bd
- SHA1 a5f8e493a76e3e104f4a8c0a2ebf1dd3d730f3d0
- SHA512 181378c7ee3e4294026e1adfbf3772b192a735439705cf0f720183132e192cd656613972936ffc9caedf6926619baa802ca2391d3640b4987327f294fde2c4ce
- SSDEEP 6144:K6DmGnV0H2LALrYcdwVDL+gqFCcEOkCybEaQRXr9HNdvOa:K6D/WiA3YcyVDLjOkx2LIa
- TLSH T10B947C29BAE08073C5678576C4E257A6FBB1B52127108ACFA390475A1F237E3BD3531E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory