General
- Target 6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b
- Size 896KB
- Sample260831-l6bzjazcmd
- SHA256 6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b
- MD5 cf1cfd176b46d03e7fb1b9ff187ab0f7
- SHA1 6d77f859888a6882f31faa01ea065ee8e637c9fb
- SHA512 d2bc197f79b39e9ec342296b43e91711a023a28c92d80943e47236bb1aba871a8b8ba4a6a254f1cd303b9e50d973dc6aec6ea117cf46f9b4539baf6fd6509a35
- SSDEEP 12288:eSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:dvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1C4157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b.exe
Resource
win10v2004-20260513-en
8 signatures
150 seconds
Behavioral task
behavioral2
Sample
6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b.exe
Resource
win11ltsc2024-20260709-en
8 signatures
150 seconds
Malware Config
Targets
-
- Target 6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b
- Size 896KB
- SHA256 6755cfbb88d97897d8899ee059e0f545c5d68f0d44a6e4601237adfe83dee06b
- MD5 cf1cfd176b46d03e7fb1b9ff187ab0f7
- SHA1 6d77f859888a6882f31faa01ea065ee8e637c9fb
- SHA512 d2bc197f79b39e9ec342296b43e91711a023a28c92d80943e47236bb1aba871a8b8ba4a6a254f1cd303b9e50d973dc6aec6ea117cf46f9b4539baf6fd6509a35
- SSDEEP 12288:eSvO2x9mONvKRILSFnOkx2LIaxya5FAQjU/Lik8CQ3uEuYyybAsLAk1:dvO2xJKRI2FOkx2LFEvcUQPxu6Es8k1
- TLSH T1C4157C31E641C03AD4A7457686BA0BBFA5787D22131565C7E3D43E662FB32D2BA3130E
- MD5 SHA1 SHA512 SSDEEP TLSH
Score7/10-
Executes dropped EXE
-
Unexpected DNS network traffic destination
Network traffic to other servers than the configured DNS servers was detected on the DNS port.
-
Drops file in System32 directory